I’m annoyed to see you getting down voted - I had a similar issue years ago with my work MacBook (couldn’t run a custom WM because any modification to the Finder was blocked without putting the machine into “unsafe” mode).
I love OSS, but without a verifiable way to distribute it large swaths of the workforce won’t be able to use it.
F-Droid is great, but sadly it isn’t enough.
Yep, check out yabai.