I also expect zillions of helpful nieces/nephews would flip that checkbox for their uncles/aunts, and, accidentally or on purpose, leave it that way.
Even if that isn’t true, making it harder for malware to flip that flag already is a rational reason to implement it this way.
I do worry very much about SIP becoming impossible to disable some day. Don't ban knives because people might cut themselves.
I also expect zillions of helpful nieces/nephews would flip that checkbox for their uncles/aunts, and, accidentally or on purpose, leave it that way.
Even if that isn’t true, making it harder for malware to flip that flag already is a rational reason to implement it this way.