PDFs are just absurdly complicated in general. Dumbing down the parser might be the right idea. I wonder what consequences that would have with how intertwined PostScript and PDF in general are with macOS/iOS; maybe that's why the PostScript engine was removed with macOS Sonoma/iOS 17? I don't know if that was only user facing behavior and Apple is still working to remove the internal usages.

It does let you run things as root.

Not exactly.

What is "root" in macOS is more or less a power user role. Apple took away the true ability to operate as root a long time ago with System Integrity Protection which walls off the critical parts of the OS from the user entirely.

Unfortunately, SIP also restricts basic system functions that are trivial in other OSes. Apple made this very difficult, and MS would have loved to do this in Vista had they not received the backlash that they did.

You can disable SIP if you want. You can run whatever you want on your machine. Disabling SIP is indeed a security risk… then again, so is running something as root. Having a Mac w/o SIP is no more a security risk than having a Linux w/o a r/o kernel AFAIK.

The way apple talks about SIP its like a miracle we survived at all pre SIP. Pretty sure I've had SIP disabled for years now when I got nagged for something or whatever and had to disable it.

SIP is a good thing and prevents a lot of (usually PEBKAC) problems. It is also the direction where Linux is going (is now? or maybe they gave up? idk, it’s been a while since I heard about immutable distros).

For tech-aware people, it is probably not necessary indeed. However, given that now “tech-aware” people are running completely random and unvalidated scripts w/o second thoughts (or even first thoughts actually) on their main machine, I’d say the “tech-aware” line is very very high…

I do recall that Fujitsu had a very... unique approach to exposing the Setup option in their firmware. It was just a UEFI boot entry. If that entry was removed, you couldn't get back into the firmware setup; you had to find the name of the setup EFI file and then run that from the EFI console.

What, people don't just recall those from memory? I fall asleep saying -Xmx and -Xms every night