I am talking about removing the ability to install kernel extensions.

As for full disk access, go try and remove Photo Booth from you Mac.