Not entirely. You can selectively remove protections:

csrutil enable --without dtrace