Still on 10.12.6 and just recently Sophos is popping up saying:
PHP Code:
Please contact your system administratorYou Mac is running with Non-stadard permissions on key directories and your Mac may be insecure  Reference Sophos knowledge base article #131959 
I've searched on their web site and found a questionable or at least it didn't make sense to me, set of terminal commands. I'm not ready to use those as I don't totally get terminal commands. I purchased their "premium" plan and had some luck finding a set of scripts to launch in terminal via text edit. That didn't help either.

Those darned permissions, how to we fix them now? Any ideas?