[phlyingpenguin]

I can't comment to disabling SIP as I haven't taken that route. I've generally taken the codesign route instead, which does require re-signing the app after every update. In the case of Zoom, that's gone away in recent versions since the app now has the virtualcams I'm using in its whitelist. For anything else, it's a very manual process.