After an invitation to investigate the problem further, I decided to withdraw the post and summarize the updates here: https://melomac.com/posts/xprotect-behavioral-flop/#golden-g...