You can start with an OS where everything, more than you will ever possibly need, is turned on. Myriad drivers are present and all are activated without any user intervention.
Or you can start with an OS where everything is turned off by default. It's up to you to choose the drivers and turn things on. The user has to make the first move.
In the former scenario, you will unlikely ever have full control of security (if that's what you are aiming for). It's too complex to think of everything that could be turned on and too account for every driver. You will never have full control.
In the later case, you will be able to achieve a better sense of control. Not to mention you will understand your OS better.
In sum, laziness/convenience cedes control to someone else, whether it's Apple, their "approved" business partners or some miscreant.
You can start with an OS where everything, more than you will ever possibly need, is turned on. Myriad drivers are present and all are activated without any user intervention.
Or you can start with an OS where everything is turned off by default. It's up to you to choose the drivers and turn things on. The user has to make the first move.
In the former scenario, you will unlikely ever have full control of security (if that's what you are aiming for). It's too complex to think of everything that could be turned on and too account for every driver. You will never have full control.
In the later case, you will be able to achieve a better sense of control. Not to mention you will understand your OS better.
In sum, laziness/convenience cedes control to someone else, whether it's Apple, their "approved" business partners or some miscreant.