I think you have your target demographics mixed up for MacOS and Linux. Once you reframe it in that light, you've answered your question. One is a poweruser who wants complete control of their environment, the other is a much broader user who wants a convenience of experience and safe environment. Trade offs to both of them.

The only happy medium I would consider to your approach is that if MacOS had two set up routes, one defaulting as a power user turning everything off and then initiating things are you want and another as a general user. Maybe that would solve it (though would be a heavy lift I am sure).