I'm thinking if, for these "one-off" tasks doable only with very special SW, we could utilize that APFS snapshoting feature of macOS filesystem.

1. Create snapshot 2. Install obtrusive SW, finish task 3. Restore snapshot.

Any sources for this kinds of workflow?