I am trying to create a limited user account without access to several builtin apps, such as Terminal.
Changing these apps permissions either through Finder or chmod failed - I assume due to them being in the write-protected /System volume. I've also tried to copy them over to /Applications and change permissions on the copy instead, but that only leads to them appearing twice in Finder.
Is there an officially sanctioned way for access control left that doesn't involve me disabling SIP and remounting /System as read-write? Screentime is not an option for me, because I've found it to be highly unreliable on iOS.
