Lets say someone wants to upgrade a Mac Pro (Early 2009) to macOS Sierra in order to get core security updates and newer versions of modern software.
Unfortunately this Mac Pro model is not officially supported for macOS Sierra. However, there is a patch tool in existence which will update the firmware on the machine that would allow the installation of Sierra.
The problem is that it requires SIP to be permanently disabled.
Setting aside all the [multitudes of] other related security concerns (i.e. "uh, patch tool?")...
Would the security threat of disabling SIP outweigh the added security benefit of OS patches from Apple and new software from 3rd party vendors?