They'd probably also block non-Windows OSes on PCs by forcing SecureBoot /w third-party key enrollment disabled, plus Pluton instead of the standard TPM2, effectively blocking alternative OSes from installing and running.