[runjake]

What? No they don't. I work for an org with 4,000 Mac users and zero of them have had to do this to get the apps they want on their Macs.

Edit: Why is this getting downvoted so much? It's 100% accurate. Here's the Apple doc describing the process. Nowhere does it mention the CLI:

https://support.apple.com/en-us/102445

[righthand]

None of them have had to let an app through Gatekeeper? Then you’re restricting the allowed software and they are all restricted device users.

[runjake]

Occasionally, but not often. BUT in no case do they need to use the CLI to do that. When they do need to, they allow the app in System Settings app, under Privacy & Security.

Heck, I am a "power user" who installs all kinds of weird apps and I haven't had to do that, except in my hackintosh days when modifying the system.

Here is the related Apple support article: https://support.apple.com/en-us/102445

[righthand]

Yes but you admit they dont need to do that but they can and probably have. That’s the simple point I’m making between restricted and non restricted devices. You may see them as guard rails or whatever but they’re still restrictions.

As soon as you let macports through Gatekeeper you are breaking through device restrictions. Does macports/homebrew have a UI?? They might not need to use the CLI to do that but they might still use it. Heck their AI assistant even might.

Another example my company doesn’t allow me to adjust OSX notification settings. Another restriction making my device use restricted.