> but they should offer a way for those of us who aren't clueless to turn whatever it is off.

I'm not sure if it's what you're asking for, but you can disable SIP:

https://developer.apple.com/documentation/security/disabling...

It's been a while since I dumped OSX and went back to Linux, but IIRC, this setting gets reset every time the system updates.

At some point Apple realized the "power user" market was too small, and they were better off treating all of their users like idiots. And that's when I left.