What's changed/fixed

• The LaunchAgent and LaunchDaemon property lists are now shipped as static files instead of being generated during installation. Some XDR/MDR security products could flag the previous behavior, where property lists were written to /Library/LaunchAgents and /Library/LaunchDaemons and quarantine attributes were removed, as suspicious. The install scripts now only copy the pre-packaged files into place, so nothing generates or modifies a property list on the Mac anymore
• The launchd SpawnConstraint, which only allows launching binaries signed by Root3, is now always set instead of only on macOS 14 or higher