their flagship OS has an administrative culture of "ClickOps" and effective security is built around practices that are antithetical to that sort of culture.