You're correct that that is the only permanent solution, but it can be bypassed until the next reinstall or major OS upgrade on Macs like this one as long as (1

You're correct that that is the only permanent solution, but it can be bypassed until the next reinstall or major OS upgrade on Macs like this one as long as (1) you're able to change the boot device and (2) there is not a firmware password set. I did it a couple years ago on a last generation Intel-based MBP to troubleshoot a problem caused by a particular piece of software installed by our IT team who, for various reasons, were unable to assist. Caveat: I don't know if this is possible anymore on Apple silicon-based Macs because they apparently "require an internet connection to get firmware and other information specific to the Mac model."[^1] The trick was to: 1. Use a freshly created bootable installer volume.[^1] (If previously setup, management software will often inject itself into the existing Recovery volume). 2. Prevent it from connecting to the internet, including any previously connected WiFi network it might remember. 3. Get it through the installation and initial user creation without being able to connect to the internet. After that, it didn't pester me until the next reinstall. [^1]: https://support.apple.com/en-us/101578 https://support.apple.com/en-us/101578