Taking a step back from the problem, users do usually have some amount of control over what is running on a system.

I mean, I understand that computers managed by typical users will be a shitshow, but much of the problem in that situation is that they don't really care.