Isn't the goal to prevent malware from modifying core system files? How different is this than a simple mandatory access implementation? As long as it is possib

Isn't the goal to prevent malware from modifying core system files? How different is this than a simple mandatory access implementation? As long as it is possible to disable it, should I choose to, I am not outraged.