Massive Sur’s sealed System quantity appeared like a good suggestion. Though the read-only model in Catalina could look impregnable, guaranteeing integrity utilizing a Merkle Tree of hashes, then locking the whole thing in a snapshot, appears much more sturdy. Like different good engineering concepts, although, it additionally wants considering by means of totally.
It’s locked down to your personal security, although. Giving up freedom in alternate for security by no means damage anytone, proper?