This whole article is sort of misleading. This is exactly what those with third party SSDs have been doing all along - disabling kext signing allows third-party software to enable TRIM. Does El Capitan natively allow for third-party SSD TRIM support, or does it merely provide a mechanism that temporarily disables rootless to allow for third-party software to enable TRIM?
I agree that, for security purposes, having rootless security enabled is the better option, and if there is a way to re-enable rootless after enabling TRIM, then we are in fact more secure than being forced in Yosemite to disable kext signing in order for TRIM to work.
I guess my question is does Apple natively support third-party SSD TRIM support or does it still require third-party software to make this happen? If it's the latter, then the article is misleading because Apple hasn't in fact enabled native support, but merely provided a work-around to its whole kext-signing / rootless security mess.
Kext signing created a lot of problems in Yosemite. OS X continues to have difficulties reading / signing drivers for both native Apple hardware and, of course, third party hardware. I think Kext signing has a lot to do with the problems people have experienced with their ThunderBolt displays, USB drivers, optical drive / 2nd hard drive configurations, and other hardware compatibility issues.
In my view, what is being heralded as "Apple finally allows third-party TRIM support" is actually Apple recognizing that kext signing sucked and they don't want rootless to suffer the same fate.