Sort of; SIP originally was simply meant to protect /System from root. But nowadays, it's more used for system attestation. Which in turn is used by the OS to decide how to ask for and enforce certain user permissions and sandbox profiles.

> SIP protects "/" but not "/Users" (macOS' $HOME base).

> that's why Muse could get it even with SIP.

Both of these assumptions are mistaken.