Did you copy and paste the command or type it out? If you type it, please note that there are two dashes before “without debug” and two dashes before “without fs”. so it looks like --without debug --without fs.
Now I’m going to go to Recovery mode and make sure
Okay, let’s go all the way back to the beginning
Step 1: Command + R to go to recovery
Step 2. In Recovery, open a terminal window and type: csrutil disable
Step 3: Reboot
Step 4: Command +R to go into Recovery mode
Step 5: Open a terminal
Step 6: Type csrutil status - Should report SIP is disabled
Step 7: Type csrutil enable --without debug --without fs (note the double dashes before the word “without”
Step 8: Close the terminal, go to the upper left, click on the Apple and select reboot. (of if you’re lazy like I am, I just type reboot in the terminal window). Now TF should work as expected and you have a bit of SIP protection. If you type “csrutil status” now, it will say SIP is disabled, but it’s really not and if there are updates to TF, you can now install them without going through all the “recovery mode, turn SIP off, reboot, recovery mode, type above command, reboot” nonsense.
Isn’t this fun?