Basically following the path that same other OSes are trailing in security, Windows, macOS, mobile, container-based immutable infrastruture.

Also a reminder that when OEMs ship Linux distros, it is always customised.