The Mac is the exception in their current product lineup: every other platform is heavily locked down, and the user’s behaviour heavily restricted.
I strongly believe the Mac is heading in the same direction. See the progression from run what you want, to optional signing of binaries, to right click to run unsigned things, to disable a setting to be able to run unsigned binaries; or “worse”, the way spctl and csrutil no longer function after deploying Sequoia.