The trouble is that we haven't figured out a trust model that works when we do exclude that relationship. The traditional Windows "run setup.exe" model is terrible for modern expectations of security. The alternatives available today are still very far behind the safety that ordinary users get today when they do enter a relationship with the manufacturer. Unless you're an expert and not a typical consumer.