@chas well they had to find a way to close one of the backdoors being abused by state attackers and so now the storage volume is cryptographically sealed/signed/verified by key only Apple controls.

It *may* be possible to do a clean install on an external drive and Apple sign it during (does this mean you can't install macOS without internet at all now?)