I considered installing this, but decided not to trust my security information to an unknown group.
There's a whole world out there beyond their walled gardens.
"Those who give up freedom for security deserve neither."
That needn't be a show stopper, but before somebody starts patching with OCLP, some deliberation about their threat model and their macOS security expectations would be healthy. Specially for hand-me-down hardware that ends up in less tech-savvy hands.
[1] https://dortania.github.io/OpenCore-Legacy-Patcher/POST-INST...