This is, in fact, the point. They do not want the support burden and negative security posture of supporting billions of computers that cannot have a locked bootloader.
I have friends and family that will continue to run EOL Windows 10 which is worse unless I convince them to migrate to Linux.
If you employ snake oil like Crowdstrike or "secure boot" (when the key stays on MS servers).