Any examples? I've been using mbpr since 2014 and haven't seen any changes recently except you have to hit "allow" button a few times.

Launching unsigned app now requires to go to settings manually and allow it there instead of just allowing on launch

Right click > open no longer works?

No, only from settings.

They're basically things along those lines. They're more nefarious when background services quietly error out and you need to dig to find it was a newly required permission.

I use macOS, with all kinds of languages locally, plus vms, kubernetes, LLMs, etc and seen no such issues.

What "permission headaches"?

There are a lot of annoying hurdles when allowing some types of application access. Needing to manually allow things in the security menu, allowing unrecognized developers, unsigned apps. Nothing insurmountable so far, but progressively more annoying for competent users to have control over their devices.

Launching unsigned apps is a problem, especially if an app bundle contains multiple binaries, since by default you need to approve exception for each of them separately.

I know that it's possible to script that since Homebrew handles it automatically, but if you just want to use a specific app outside of Homebrew, experience is definitely worse than on Linux/Windows.