They have a much better security model than even OS X + little snitch + little flocker, too. I have both nvme pixelbook and touchbar rmbp and find myself using both a lot.