Me neither. I can't call OSX core locked down except it doesn't go out of its way to provide hooks for malware.
Stuff like that is standard to any toolkit. However what you may be talking about is that bullshit they call the Windows directory and Windows Protective Service where it doesn't let you modify it directly but it's easily modified programmatically.