I don't know whether we should push for more system integrity from the manufactures. They'll give us locked down systems that run binary blobs that your OS can't control, prevent installing alternatives OSs by only booting signed kernels... If you want user freedom you have to go another route.