Sorry, I readded the question with proper formatting and I am unable to delete this one.

Hey Quinn, thanks for answering. I will try prefixing the XPC endpoint with an app group ID. In the meanwhile: Is disabling sandbox good practice? This app is distributed via MDM so as I understand it will work and solve it, but I don't know if it is the correct usage. Temporary exception works fine, but I think I don't understand temporary-exceptions properly, are apps with temporary exceptions allowed by Apple? Should I ask apple for a non temporary mach lookup entitlement? Thanks.

Hey Quinn, thanks for answering. I will try prefixing the XPC endpoint with an app group ID. In the meanwhile: Is disabling sandbox good practice? This app is distributed via MDM so as I understand it will work and solve it, but I don't know if it is the correct usage. Temporary exception works fine, but I think I don't understand temporary-exceptions properly, are apps with temporary exceptions allowed by Apple? Should I ask apple for a non temporary mach lookup entitlement? Thanks.