Yep. I was trying to think of the message but could not remember it and was too lazy to reproduce lol. Its been like that since Catalina. So, this limitation that will be removed in the near future has been around for 4 OS releases unless it gets pulled in Ventura which I doubt. Sounds like time for more feedback requests.
***EDIT***
I made a feedback. If anyone wants to use my template here it is. This is not related to Ventura, its a left over thing from Catalina. However, Apple is paying attention to Ventura right now, so why not point at Ventura. Update as needed :).
Subject: systemextensionsctl uninstall without disabling SIP
Which are are you seeing issues with: Security
What type of feedback are you reporting: Suggestion
What does this Security issue you are seeing involve? Something else not on this list.
Are you able to reproduce this issue? Yes
INTRO:
This feedback is about a change in default behavior for macOS Ventura that, if left unmanaged, will impact our ability to upgrade existing Macs and deploy new ones.
SCOPE OF IMPACT:
* ### Macs eligible (or likely) to upgrade to Ventura;
* ### Macs refreshed annually;
* ### Macs across the entire organization;
* ### computers across all operating systems.
PROBLEM: systemextensionsctl uninstall requires SIP to be disabled which prevents programmatic removal or hands off troubleshooting of system extensions
ISSUES & CONCERNS:
- Requires a user to be walked through disabling SIP on their device
- Lowers macOS’s Security for basic application troubleshooting
- More clicks to troubleshoot system extensions leads to more helpdesk calls
- EFI and recovery passwords limiting access to recovery lead to more devices needing to be reprovisioned to troubleshoot system extensions
WHY THIS MATTERS:
(company name here) Leverages EFI and Recovery lock passwords to prevent users from accessing macOS recovery. These passwords are not known to the end user. This requires devices to be shipped into a central location for support staff to perform simple troubleshooting which should be able to be performed remotely. In many cases devices must be needlessly reprovisioned via MDM command to simply remove an orphaned or corrupted system extension. This leads to a poor user experience, and unnecessary device reprovisioning.
The default behavior when running systemextensionsctl uninstall is to present a message that states this limitation will be removed in the very near future. This was 3 years ago.
### Further details on why this matters###
Dependent Applications
- Application names here
-
-
-
-
REQUESTS &/OR SUGGESTIONS:
- Update the systemextensionsctl uninstall command to no longer require SIP to be disabled to run.
-Or-
- provide an alternative solution for managed devices that can force remove system extension that are no longer needed, or broken and cannot be removed by the application that installed the System Extension.
-
-
-
-
