@hikari Image if you could be the root of trust on your machine

@hikari @saagar at risk of dunning-krugering too hard i think what Saagar is trying to get at is that because SIP is the first line of defense in a lot of ways your two choices are "be able to snoop on platform binaries/poke around, but your security posture is utterly fucked" and "literally can't do anything interesting"

@slice @hikari This is actually the security model of all computers Apple just identifies it as something specific

@saagar @hikari it actually drives me insane that Apple actually has the opportunity to innovate here (and has, e.g. wrt BootPolicy) but they just don't