When root meets immutable: OpenBSD chflags vs. log tampering

macOS has always had these chflags attributes, by the way, long before System Integrity Protection existed. Changing or removing the system-immutable/append-only flags required booting into single user mode. Even the macOS installer application itself was unable to clear them otherwise.

That's not surprising given MacOS' lineage.