Apple gets the credit for designing a bootloader that allows you to run a third party unsigned OS without degrading device security when you do boot into MacOS.
Applying the security settings per partition instead of per device is much more flexible, and you don't have to worry about Microsoft controlling which OS signing keys are valid.