I hate this take. That is not how security should look on consumer devices at all and it’s one of the ways the security industry is being co-opted to ruin consumer devices. The user is not the attacker on a consumer device. Consumer devices should provide tools to enable strict protections and allow the user to choose. It should be easy to put the device into the fully locked down state at instal/initial provisioning, likely even the default, but it should also be easy to deviate from that during provisioning. After provisioning it should, of course, be incredibly hard or impossible to go from the locked-down state to the nonlocked-down state without wiping data.

deleted by creator

Does macOS have namespaces? Can you modify the kernel? An equivalent to Linux Security Modules? ConfigFS? FunctionFS? I haven’t used it in decades so genuinely asking.

If I remember correctly you have to do some funny business to change things in the root directory too?

They’re completely different operating systems, there will of course be differences. In my experience Linux definitely gave more freedom to do whatever you wanted though. It’d be a bit disingenuous to argue otherwise. They serve different purposes, and that’s ok.

But oof repairing things on those logic boards… Everything soldered on makes the hardware a nightmare. I swore off Mac after trying to get one repaired. Had to trash the whole logic board and lose everything. I think that design is almost criminal tbh.