Comment by throw0101a

AIUI, SIP protects "/" but not "/Users" (macOS' $HOME base). All your private data is in $HOME, so that's why Muse could get it even with SIP.