Currently, I am able to mount and edit the EFI partition without any special privileges. Is that correct?
I understand that the bootflags for SIP protected regions are stored in
nvram which is inaccessible through bless, but it seems strange that I can manipulate the binary, and the changes will persist through a restart.
Is something wrong here? If not, why is it the case?