Is this still possible? My lay understanding is that the SEP decrypts kernelspace on-demand, loads the opcodes on a very temporary (and randomly allocated) basis, and makes dumping any meaningful amount of the contents out of RAM very difficult.

Not a jailbreaker at all, so happy to be completely wrong on this.