Thank you for rescuing me and turning my apparently off-topic, misguided, uninformed, uneducated posts into something relevant and meaningful for this thread.No problem. Like I mentioned, I think at the end your idea isn't inherently bad, just the initial presentation wasn't good and it produced knee-jerk reactions from many of us, including me more or less. Glad the discussion turned more civil, at least between me and you.
It's not a bad thing to be conscious about security but honestly OCLP was originally meant to be a small project to use for people who know a thing or two. We never anticipated the influx of people coming in and in turn making the Discord server too quite chaotic at times, which is why the lead developer stepped away from the main channels for mental health reasons.
Also to comment on a bit on what someone said about "it's a small project so it doesn't matter as much".
I think that has some truth to it. Let's take Windows and macOS for example, macOS definitely is in some ways more secure by design but another very big reason it has stayed mostly free of malware is that its market share is significantly lower than that of Windows, which means Windows gets targeted more. OCLP users are a fraction of that marketshare.
Windows is also majorly used in businesses where the real money is and attacks of modern days have mostly moved there, regular users aren't really the interest of the malware writer groups anymore as there isn't nearly as much money to be made. Ransomware is the biggest modern day malware after all and that is because of money.
People also root their Android phones using custom tools and do all sorts of tinkering on them.
Information security can be a bit of a sly thing, sometimes it makes you too conscious about security when the reality is you have to balance between security and convenience. People in information security always have very sophisticated methods to protect oneself but those don't really apply to the average user who mostly just doesn't care because it's too inconvenient.
People with OCLP choose the convenience of keeping their old Mac instead of paying for a new one, with slightly lowered security. It also helps the environment when old systems get extended life and aren't thrown to landfills.
EDIT: Oh and to add, WiFi patching definitely isn't new to Sonoma with OCLP, it just had to be extended to more modern systems. We've had to rely on it more or less since Monterey (if not earlier, I joined OCLP around Monterey and I'm forgetting whether dosdude1 patchers did WiFi patching) at least for the old Mac Pro models and pre-2012 systems. Apple keeps removing drivers in subsequent OS releases and we have to add them back.
I fully understand and appreciate the small project exceeding your expectations - that's usually a great problem to have! Congratulations. Maybe there's still a chance that the increase in exposure warrants a strategy change that includes the clear data-security warnings (during patching and upon each boot), since it is now clear that OCLP's adoption is likely to grow well beyond your intended audience. I didn't know that you were already applying root patches for Wi-Fi before Sonoma, as I haven't had a platform that required pre-Sonoma Wi-Fi root patching. It was the Wi-Fi root patches that triggered my data security concerns about OCLP. I'm sure you're aware that there is a parallel project enabling Intel Wi-Fi for Mac that does not require breaking the macOS seal. Maybe worth investigating for its application to Brcm? Not sure.
During this learning experience with you, I have refocused my intended use of OCLP from extending the useful life of my "production" Mac (where I build software, access my Apple Developer Account, do my banking, check e-mail, check Facebook, etc.) to a hobby and an experiment on a non-critical Mac - still very fun and entertaining, but not something that risks any sensitive data or identity information.
Thank you again for this outstanding interaction. You have been a pleasure to talk to!