Updating Totalfinder and SIP

If SIP is re-enabled after Totalfinder installation, is it necessary to disable SIP again to install an update?

No. The idea is to do this one-time setup with TotalFinder system component and then keep other files outside the SIP-protected area, so they can be updated at will without going through it again.

Rarely we might need to update the system component itself or after major system upgrades you might need to do that “SIP dance” again:

https://totalfinder.binaryage.com/sip-versions