Why does SIP grate? For my work machines I really want features like SIP to prevent fuckups and malware (especially considering how much code a random rust or node application pulls in).

For tinkering machines and servers and stuff of course that’s a different story..

You can always disable it on your tinkering machines.