When Apple secured the OS from third party, they also purposefully closed the door on deeper third party integration to privilege their ecosystem.
macOS only being half as useful for Android users makes it harder to be the "best" for that swath of users. iPadOS being the only tablet form in the ecosystem will also distance other users etc. They just can't please everyone while locking them in a limited ecosystem.
> They don't have an easy way to run untrusted software in a containerized way (compare Fedora toolbox).
The App Store is the way to run untrusted apps in a containerized way.
Typically not a great idea to be against humans, especially the ones that give you money.
Last time I checked, their market cap was North of $3T, so someone is giving them money…
Sure, macOS has continued to secure more and more elements of the OS. They have taken a different approach than Windows and Linux, which both keep large swaths of the OS woefully insecure from third-party apps for legacy reasons. But for each and every new lock, there is a key. An incredibly secure OS that gives you the power to control what third-party apps access on your computer is the best power-user feature.