If you aren't already doing private cicd, effectively acting as "the OS developer", you don't have "full control" over your system.