Preventing unsigned code from running, and choosing which sources of software you do want to trust, is not just for DRM. It severely reduces the attack surface of a device and makes it much harder for user error to cause a compromise. Accidentally getting compromised is possible for advanced users, let alone the most tech-illiterate person in the company.

iOS being totally locked down in this way is no small part of why exploits for that platform sell for so much more money than exploits for other platforms. Of course, it is also used for DRM on that platform.

And to add to my previous comment, I can't see why you would want to keep your laptop or desktop unencrypted. If someone steals your computer, they have access to all of your data.

And without Secure Boot and/or TPM-backed key management, hard disk encryption becomes vulnerable to someone planting a modified boot loader or firmware on your system.