The fix is pretty obvious - migration assistant should copy granted app permissions across.
If someone installed apps with kernel extensions, disabling enhanced security on the hardware, then Id argue they should be competent enough to understand the issue, so the article is a bit disingenuous on that front.
Additionally, things like Apple ID for iCloud login require re-logging with 2 factor, again because the hardware has updated.
So there’s probably a cleaner UI model here that could run the user through all of these side cases, but it’s not as simply as copying app permissions (all of the unix level file permissions remain intact already)