That's still on the Linux kernel. The userspace differences aren't what make it possible to lock down. Someone could just as easily make a locked down desktop Linux, which maybe ChromeOS is already.