A non-technical user could disable SIP, though they'd never need to; good luck to them upgrading to Windows 11.
Newly requiring it on upgrade when it's hard to do and hardware may be incompatible anyway isn't great IMO. It's not really protecting anyone from anything, because it just leaves them unprotected in exactly the same way on the older OS. As long as they don't brick it trying.