On this site and throughout other Apple enthusiast communities, I often see people strongly advise against disabling System Integrity Protection. This has always struck me as somewhat odd, as SIP did not even exist until recently, and it prevents a lot of tweaks that used to be relatively commonplace, such as SIMBL and OSXFuse.
If I am an enthusiast user following basic security practices such as:
- Using a strong, unique administrative password.
- Only granting administrator permissions to applications I trust.
- Only using sudo when necessary, and only for commands I understand.
What types of attacks am I opening myself up to by leaving SIP disabled?
Put another way, is a Mac computer without SIP more vulnerable than a comparable machine running a default configuration of Windows or a common flavor of Linux?