It turns out you get to take responsibility for the downstream consequences of your actions, whether you expected them or others help you or not.
That is true in most social, legal, etc settings.
(in law, it's known as but-for causation)
So yes, this is MacOS's fault.
Try moving to Windows and seeing how free you are to setup things in an enterprise environment.
SIP is the default though. Turning it off is an option for some, for now. But Apple has clearly indicated they're moving towards a more restrictive ecosystem through there actions for a long time now.