SIP, TCC, and SSV: The Three Walls Around macOS

Root is not enough anymore. Since OS X El Capitan, macOS has layered three independent defenses that even the superuser cannot cross: System Integrity Protection, which blocks writes to protected system paths regardless of UID; Transparency, Consent, and Control, which requires explicit user approval before any process touches private data; and the Sealed System Volume, which cryptographically ver...