Only thing missing is for them to start signing system files with a short-lived certificate, to force people to run updates every couple weeks.

Yes, I'm still bitter about my Windows Insider experience. On the one hand, it's kind of my fault - I signed up for testing the beta release. On the other hand, holy shit. I dual-boot, and I didn't log into Windows for some ~3 months, during which my Insider build expired. After that, when I finally did try booting to Windows, I was greeted with a completely bricked, unrecoverable system: core DLLs had expired certificates, and _nothing_ would start, as code signing checks failed.

(This was a Windows 10 upgraded from Windows 8, and it was past the free upgrade period, so I ended up buying a new Windows 10 license. So in the end, they've managed to make money off me with this.)