Comment by jon-wood

> Configuration profiles cannot be installed, and the device cannot enroll into mobile device management (MDM), while Lockdown Mode is turned on.

(From the article)

So this would have prevented Hermit as you'd need to install a new configuration profile to allow sideloading of applications from that source.