Thanks for the pointer to Horvat's material.
It's unclear if his method requires leaving SIP disabled. If so, then this rather awkward workaround would be unsatisfactory for me on security grounds. If not, then it's worth a try.
But still no excuse for WRI not having added support on platforms other than Windows.