Further to yesterday, SIP was actually disabled and I didn't realise. This was preventing apps from requesting access to the required hardware features.
It appears that during the problems I had a little while ago the recovery partition also got wiped so I had to boot from a USB stick in order to access Terminal and re-enable SIP. Internet recovery wouldn't accept my password.
