wish i could easily clone my apple-branded-hardware unvirtualized instance into a vm before applying the 10.15.2 update to see what breaks/fixes, but sadly that is impossible for several reasons