TinkerTool 5's System Maintenance pane has an app blacklist tab:
In this menu is a list of apps Finder will refuse to launch, because Apple thinks they're incompatible with the newest version of macOS. Apple is sometimes wrong—some of these apps will (mostly) work if launched via the Terminal. (One prominent example was iMovie HD in macOS Yosemite)
Where in the file system is this blacklist actually stored? Could a SIP-disabled machine make changes to it?