dirtyharry50: I know there are issues with some software but they are relatively rare and I already acknowledge this pertains to such things as utilities that alter system elements like the Finder, Dock, etc.
There are security issues with allowing access to system folders, not protecting memory to the greatest extent possible and not protecting the Apple apps that ship with the system. Sorry but that is not debatable just because you want to run some utility that is writing to a place it no longer is allowed to because allowing access to those places even as root is a security risk. It has already been demonstrated that it is possible to gain root access remotely by malware and thus SIP stops that problem cold.
There is nothing lazy about Apple implementing improved security.
There is still root access but it is restricted and controlled more now and that is a good thing that safeguards the system from attacks.
Don't get me wrong. I don't care if you turn it off. It's not my computer, it's yours. You are making a security tradeoff though when you do that. I don't know how you could read the article I linked (if you did) and not clearly understand this.
It does sound like Linux may be a better choice for you if you want to be sticking stuff in the operating system folders, etc. although you could still do that on a Mac just by turning off SIP. However, in Linux you also have the same security risks without this protection that a Mac has without it. The only plus is that the installed base is even smaller so a relatively unattractive target to hackers other than those going after servers.
Interestingly enough I found out the hard way recently that you can trash a Windows installation by overriding ownership of a system file and renaming it. You'd have to see this to believe it. I changed one relatively unimportant DLL to make an old game work and the system actually became unstable, the mouse started acting up and it would not allow me to change it back even though I had full access control and ownership of the file. I had gotten a warning dialog with a dire message telling me not to do this before i did it but I did it anyway. I had to reinstall Windows to fix it. This was with Windows 7 this happened recently.
I mention that because I wouldn't want you to think you are in for any sort of freedom in the Windows world to do whatever you want either. In Linux though you sure can. If you have the talent and the time you can modify anything to your liking. Maybe you'd like that much better. Companies like Apple and Microsoft are not about this kind of end user freedom to tinker but for the most part that is for the best. You have to remember that the majority of users are not like you necessarily and if it was left possible for them to screw up their systems it is guaranteed that some will not to mention the malicious attacks potential when system areas are vulnerable to unauthorized access or user errors in granting it.
That's another issue. Users will grant access to something they think is okay but sometimes they are fooled or they are wrong and it is not okay at all. SIP saves them from themselves. This for the majority is a good thing again.
Apple can sign an application, they analize the code of many of the mac app store application, if they want they just could disable SIP for some good applications.
2. Since osx is a computer OS limitations like this cannot be accepted. Apple was lazy because they don't think another more scalable solution, instead of just force a power user to "jailbreak" a mac.
3. Apple wasx also lazy because you cannot decide a white list of applications (maybe from terminal so that a normal user will never do that).
4. the risk you're talking about are really rare even for a noob user... and, if I have to reset my system from a time machine backup,, is not that bad at all.
5. no system is without security holes, the problem is when an hacker can use a security hole before it will be fixed.... since Yosemite is still supported and it will be updated for the next few years (5-10 I don't know but it will be supported for a lots of time), Apple have to fix any security holes in the system... with or without SIP there are security holes but with it there is less freedom.
6. OS X, when I choise it, was the best system for me, Unix-like (so a good bash terminal), no limitation, all the software that I need (Unity3d and Blender in the first place) and a stable DE (also some gaming and wine like linux). Now with El capitan is no more the best system for me, Unity3d will out with a linux version, El capitan has SIP limitation. Windows + Linux is not the best solution (two OS instead of one is not confortable), but is the only solution, a good Unix-like system and a system that I need for some software (not so good but since linux don't have all the software I need I have to use windows).
I don't want to jailbreak my mac, I bought a mac because I want only one Unix-like system without need to reboot....
El Capitan is now more iOS then OSX and I'm sure that Apple will not stop here (if you want to enforce security you can do much worst).
I read many article (also the one you posted), I know what SIP is, and I know that the trade off in security is not a real trade off... because SIP is not a security feature, is a security limitation (like the iOS security limitation... "you can only install app from the store"). If I give you an iphone without a sim and without a working wifi your iphone will not have any security problem... but this is not a security feature is just a broken and limited iphone.
A security feature does not limit the user, it warn you, it stop you from doing it automatically, but if you really want to broke the system you must have the liberty to do it. Also a security feature is not on or off, is on with strong or weak or white list limitation, or off.
I will have my mac for the next 2-3 years, if Apple wants to turn SIP from a security limitation to a security feature apple can do it, and I will change my mind. if not I will just change system (and for me it's really easy, I have many virtual machine so I still know how to use windows and linux... also I know how to change my mac application to cross-platform solution (there are integrated time machine also in linux and windows, thunderbird can replace mail... maybe the only application I cannot find is an alternative to Pixelmator... I don't like Gimp and Photoshop cost too much for my use).
SIP is a new "feature" apple can still improve it, if they go in the right direction SIP can be a great feature for user without be a great limitation. I don't understand why say that SIP is a perfect solution when is not...
Windows in that case that you explain was a good example of good security system. You want to override a dll, it warn you but you still want to do that so you do that, it's just right your computer if you want to break it you have the right to do it. Also the mac without sip ask you for a password to change some system folder (not just a warning, ask you for your root password, so if you don't know what you're doing and you put your password and change the system you deserve what come next)...
Finally, I know that in one or two year there will be many software that will just disable SIP automatically (just asking for the noob user permission like always), user that want to broke their system can do that also with iphone (jailbreak) that's why security limitations are unless.
The only real solution is to teach noob user how to use a system, limits are just placebo... that are annoying only for power user.
if I have to turn off many security feature (there is not just SIP but also the one that stopp you from installing applications outside the mac app store, and I'm almost sure they will add other stupid limitations), reboot is not so annoying anymore in comparation.