Pointless comment as the same holds true for macOS. Yes, you can load unsigned kext still, and yes, you can modify the userland. Not as easily, but I would argue it is also not harder as on an immutable linux distro.