Little Snitch required a kernel extension until the Network Filter API was introduced. Homebrew required SIP to be disabled when it was first introduced but that's almost definitely fixed now. Some other software like certain hypervisors could have required it. I just think it's more likely for someone to disable SIP than find a different program that doesn't mind it, and those programs were all over the place when it was first introduced. Less so now, I suppose.
> If you need kernel extensions you should look for a different solution, at least on the Mac.
If you need kernel extensions you should look for a different solution, at least on the Mac.