Governments might make it illegal to run these "dangerous" unsupervised OSes though. Or what could happen is that your bank, government website etc fails to wor

Governments might make it illegal to run these "dangerous" unsupervised OSes though. Or what could happen is that your bank, government website etc fails to work "for your protection" because your machine fails attestation. This is something that's already being done on Android with SafetyNet, albeit with apps instead of websites. In addition the EU is also working on an online ID so a website can request your real identity and verify it. This would link in with that, validate the user as well as their hardware. Right now? No. But I could see it happen in 10 years. Especially once CSAM is no longer the scapegoat and they have admitted they want the data for a lot more surveillance. I can already see the posts of people that think they have nothing to hide.