It's not only browsers though. The OS has a root store which is used by other non-browser apps. I also want my email program not to be susceptible to government

It's not only browsers though. The OS has a root store which is used by other non-browser apps. I also want my email program not to be susceptible to government MitM attacks. And whatever else I'm running. Apple and Windows could be compelled to limit the degree to which that store is mutable or even visible. More and more it looks like Linux on the desktop is the only option.