I find that I fall somewhere in between. I tend to turn on (or leave on, or configure) every security feature available that doesn’t create an immovable obstacle to my needs. Lockdown mode does that, so I partially counteract that by running SAP Privileges and also creating a separate, dedicated admin account that I almost never end up signing into directly.

Turning SIP off just doesn’t make sense to me without a compelling reason. Those reasons aren’t as common as they used to be. I seem to remember early in the life of SIP, the Steam client didn’t work well so you’d end up disabling SIP on some personal devices. I don’t think that’s been the case for a long while.