Comment by Citizen8396

Not entirely. You can selectively remove protections:

csrutil enable --without dtrace