macOS utilizes kernel permissions to limit writability of critical system files with a feature called System Integrity Protection (SIP).| Apple Support
SSV not only helps prevent tampering with any Apple software that’s part of the operating system, it also makes macOS software update more reliable and much safer.| Apple Support
The macOS installation process installs a pkg file with root credentials. Because of this high level of privileges, it is essential for a Mac system administrator or security expert to be able to i…| Scripting OS X
macOS includes a technology called Gatekeeper, that's designed to ensure that only trusted software runs on your Mac.| Apple Support