[righthand]

Yes but you admit they dont need to do that but they can and probably have. That’s the simple point I’m making between restricted and non restricted devices. You may see them as guard rails or whatever but they’re still restrictions.

As soon as you let macports through Gatekeeper you are breaking through device restrictions. Does macports/homebrew have a UI?? They might not need to use the CLI to do that but they might still use it. Heck their AI assistant even might.

Another example my company doesn’t allow me to adjust OSX notification settings. Another restriction making my device use restricted.