Comment by runjake

Occasionally, but not often. BUT in no case do they need to use the CLI to do that. When they do need to, they allow the app in System Settings app, under Privacy & Security.

Heck, I am a "power user" who installs all kinds of weird apps and I haven't had to do that, except in my hackintosh days when modifying the system.

Here is the related Apple support article: https://support.apple.com/en-us/102445