wouldn't $(sudo mv /Applications/Xcode.app/Contents/MacOS/Xcode /Applications/Xcode.app/Contents/MacOS/Xcode.nope) do that, while leaving the actually important SDK bits intact? I hypothesize `sudo chmod a-x` may work, too, but I don't actually know how much the .app bundles care about unix perms