If you're arguing that SIP isn't a useful defense against malware, I agree there.

Sandboxing full disk reads is orthogonal to what SIP actually provides. It's entirely possible for an unsandboxed binary to slurp your private data even with SIP enabled.