(actually you can totally disable SIP for a mac-in-mac VM, via UTM or somesuch. of course if you do Metal stuff in there then I hope you're really really patient)