And yet, they've been guilty of uninstalling programs they don't like before (https://www.zdnet.com/article/microsoft-windows-10-can-now-a...).

The only real way to avoid this is to sandbox all Windows and macOS systems and only run them from Linux hosts, but you're still taking a performance hit when you do this and sometimes usability just isn't up to par with the other two.

Correct me if I'm wrong, but i believe Microsoft enforces certificate checks, meaning you need to buy certificates regularly and be in good standing with the company so the apps you signed with the certificates will run on Windows without issues. I believe Defender can act similarly to Apple's Gatekeeper.

I think on Windows it's not only based on a missing signature. I sometimes get the "this file may damage your computer" message. There's also an "ignore" button hidden below a "more" button, but it in the end it lets you use it. But it doesn't always happen. [0]

It's not very user friendly, but it might be a bit more intuitive than apple's special dance of click right -> open to bypass said controls.

---

[0] For example, the Prometheus exporter for windows x64 is not signed and doesn't trigger the alert. I can download it (no alert) click open (no alert) and it runs . The x32 version does have a "this may damage your computer" alert in the browser (edge).

https://github.com/prometheus-community/windows_exporter/rel...

Well, for the most part at least. Remember Windows RT and Windows 10 S?

Yep, got a tablet here that is now a brick as Windows RT is no use

Oddly enough, Windows RT still gets security updates until 2023.

But with it stuck on IE11...