And Apple has stated that they're fine with that: you can disable SIP and Gatekeeper. But for 95+% of Mac users, who only want to run software from reputable sources, these are good steps.