>You're still free to allow every app on your computer full access, I won't.

Sure. Do I have to reboot the machine and put in special commands in the UEFI? Will the next OS update then revert that on me anyway? Will they silo all the data on a per-app database, then make the machine unjailbreakable?

I have little confidence that I am still free to do this much longer.