

Yet Apple, Google and Microsoft are doing just that. In fact, if a security model that depended on a company like Red Hat authorizing what can or can't run on Linux, it would be rightly criticized as Red Hat trying to "own" everything instead of developing a secure system at the OS level. It is interesting that you bring up Qubes OS, because its security model doesn't depend on Invisible Things Lab, the Qubes developer, deciding what can or can't run on Qubes OS. It's not a coincidence that Apple, Google and Microsoft's security implementations enshrine each of them as ultimate gatekeeper and single source of truth for security on their respective operating systems. This is because Google and Microsoft want to own everything, as well. Starting with research examples like Qubes, and all the mainstream security efforts in Windows, and ChromeOS. A lot of people talk about Apple as wanting to "own" everything, but the trend in securing consumer OS environments is clearly trending in this direction.
