Replying to @georgia@netzsphaere.xyz

@georgia@netzsphaere.xyz I would say the main things to disable are gatekeeper (having it enabled makes you jump through hoops to launch unsigned applications, it's unfortunately they made the process so annoying because I'd rather have gatekeeper enabled since it is useful but they fucked it up) and, if you really want to install/tweak system modifications, System Integrity Protection, though I personally would recommend keeping it on unless you really want some specific macOS modification because it is a genuinely useful security feature