What is the security model that you think windows uses that Mac doesn't?

Already on Mac there are plenty of things you simply cannot do as root/super user/administrator, no matter how many passwords you have or enter. Having code execution in a user account doesn't provide full access to all the user's files and data, etc.

I'm curious as to exactly what this malware is doing - is it bypassing SIP and/or entitlement checks, or is it essentially the same as downloading a bash script and running it and giving it your admin password.