TIL: you can find out if you System Integrity Protection (SIP) enabled by running, on the command line, csrutil status.