> One can't expect that every driver package submission from every vendor is thoroughly vetted every time, this is a matter of trust and respect.

Apple seem to do a pretty decent job of just that

The situation is very different on Macs. Apple control almost the entire hardware stack of the machines that macOS runs on. They make it an absolute pain in the neck to run any application not blessed by attestation. This attestation server is also frequently offline. They've also made it very difficult to write things like filesystem drivers, having completely pulled that functionality from more recent versions of macOS. In fact, if I recall correctly one cannot ship a third-party kext on more recent Macs, especially ARM ones. As such, hackintoshing has basically vanished as a hobby.

At least on Windows, the most you get is a scare screen saying 'this app is from an unidentified developer'. I know what I'd rather have.