The paragraph you quoted is in context warning the user about MANUAL intervention in the registry, that requires privileged access.
So we aren't comparing it to "what can random app do", but what can super user do.
in macOS a developer is like 90% likely to already have SIP disabled, because if at any point they had to do even one single thing that SIP didn't like, they would have had to completely turn off all security for the entire operating system
Little Snitch required a kernel extension until the Network Filter API was introduced. Homebrew required SIP to be disabled when it was first introduced but that's almost definitely fixed now. Some other software like certain hypervisors could have required it. I just think it's more likely for someone to disable SIP than find a different program that doesn't mind it, and those programs were all over the place when it was first introduced. Less so now, I suppose.
> If you need kernel extensions you should look for a different solution, at least on the Mac.
You gotta love Windows.