> Chromebooks, Windows S (and RT before it), notarization of apps on MacOs could be helpful in an Enterprise environment to prevent malware, this is at the expense of freedom of choice.

I think the opposite is true: these are useful in a home environment, for the vast majority of non IT expert users. In the enterprise, there have always been other mechanisms for preventing malware, mainly in the forum of not giving users full admin rights on company laptops, PCs etc.

Even as a software engineer, I don't always feel fully knowledgeable on how to run a secure system. I can absolutely assure you that my grandma is not qualified to act as a sysadmin on her own PC. So while I dislike the idea of not having the option of taking full control of your system, I nevertheless think that the vast majority of users are better off not using that option. And when I say vast majority, I don't think it's like 80%,but much closer to 99.9%, including most programmers and enterprise users.