Exactly, they're conflating choice with complexity. As you said, you can have any level of control, via various permission levels. I think what would be helpfu

Exactly, they're conflating choice with complexity. As you said, you can have any level of control, via various permission levels. I think what would be helpful if there was a concept of a "system admin" profile that you could apply onto any device/computer. Non-technical users may want Apple to be the 'sysadmin' and only use the Apple store, use Apple recommended apps, etc. - Kinda like the an MDM profile. Any other vendor, as a paid/managed service, could supply a more permissive app store, and manage updates, etc. Companies who issue work devices would have their own "profile" to manage the device.