>This could be solved by bundling it with OSes by default.

Apple and Microsoft? I trust apple a bit more and MS none at all.

Linux is a bit different because the kernel is the OS, but only a small part of all its different packages. Also you'll have to watch it like a hawk because nation states will constantly try to compromise it.