The NVIDIA Web Driver situation is/was why many people across the board disabled SIP at one point. There was an update during High Sierra 10.13.3 or 10.13.4 that basically changed the way this was handled. Unless SIP was ENABLED, the driver would not install properly. There were instances where people would then disable Gatekeeper to force everything to work instead of doing it the right way. Then the "never breaking driver" that was pulled by NVIDIA (with Volta support) also needed SIP disabled for SOME people to install properly after it was pulled. After everything was working, MANY people failed to re-enable SIP/Gatekeeper as suggested.
macOS Catalina was supposed to support a GPU-level system access for 3rd party vendors that basically would allow all of the OS security features to remain in place while enabling access to the "stuff" needed, but I've heard nothing of those developments recently.
The reason this was noticed with AVID folks more than any is because those systems also required SIP disable for iLok at one point. Could not use the software without the iLok authentication key and it was basically a requirement. Many continued to run with SIP disabled daily because of this.
This has impacted more than just MP6,1 machines. And there are a lot more MP5,1 machines being used in "Hollywood" than anyone wants to admit publicly.
the only thing I don’t get is the iLok connection. I never had to disable SIP on any machine to be able to use my iLoks. Is this only about first generation iLoks? The ones that actually looked like a key?
I mean even generation 3 is already 2 years old so I didn’t think people would still use these.