Don't want to sound like I'm proselytizing, but unless you run Linux, your computer really isn't yours (closed firmware aside).
Microsoft is just as bad at treating your hardware as theirs that they so graciously allow you to use (in between forced updates, criticizing your browser choices, and trying to trick you into storing everything you do in one drive)
Forced updates are a good thing for most people, though. The general population doesn't know or care about infosec, so they'll put off updates for months or years.
A notification, in the tray and elsewhere across the OS, with a short description like "Updates are crucial to the security of you and your device, they also provide the freshest experience." would get the point across. What would be even better is if there was a one-click NQA button to initiate the update, perhaps even included on the notification.
Don’t want to sound like I’m proselytizing, but there are other free operating systems not based on Linux: FreeBSD, FreeDOS or ReactOS in example. I wish, I could add GNU/Hurd to the list, but from what I know, its unusable at the moment. Redox is also a new OS written in Rust, but it's not ready yet (I think).
Now, are these real alternatives to a regular Linux based OS? In some cases they are (FreeBSD and their family), but most probably would just use Linux for their PC. They aren't even suited for gaming I guess, the likes of Steam. I was just "Acktually"-ing around that you don't "need" Linux for owning your computer. I mean, you mentioned closed firmware, so technically I was allowed to. :D
Yeah my position is really to recommend any FOSS OS in the large over proprietary ones. However, since my experience is primarily with Linux distributions, and I do think that Linux makes sense for a lot of use cases, I usually start by talking about "Linux" first.
But, from my experience, if a "solution" to a problem "forces" the user to make a choice, then they'll stick with what "currently works" over having to make a choice. So when I talk to people about Linux IRL, I typically direct them to Linux Mint directly, even though other distros exist and it actually doesn't fit my use cases. Once they're comfortable in the Linux ecosystem, they can switch to a different distro or OS family if they feel the need to do so.
Yeah, I know people running FreeBSD as their daily driver; totally left that one out haha.
The rest of them are either niche (e.g. FreeDOS for retrogaming) or not quite ready for daily driving (e.g. ReactOS -- which I've been rooting for for a while now).
I've said for years that the very last power we have as consumers is the ability to turn off our internet and still be able to use our devices. That is my minimum expectation of any company.
Fridge needs an internet connection, fuck you. TV won't work unless it's connected to the internet, fuck you.
But most especially (and this is why I moved to Linux originally), computer needs to always be connected to the internet even if all I'm doing is opening an office program that has nothing to do online? Go fuck yourself.
The ability to unplug my ethernet cable and still be able to use 99% of my computer with the exception of email and a web browser is the absolutely most basic human right left to us.
Can you though? LS now operates in user mode, which means it can no longer block traffic sent to Apple via a kernel thread.
It’s all a bit pointless though, as a LOT of hardware now calls home as well, and it doesn’t matter what OS to run on top of it unless you’re running something like TempleOS. Vanilla Linux is not going to protect you by itself. And if you’re using a repository system for software updates, that’s going to be reporting your software too — and many web browsers also report the URLs you go to (or even consider going to) and what extensions you have loaded.
But that article points at a solution for macOS users: it’s the certificates that are being checked. Any non-bog-standard software I run is not notarized or signed, and it functions just fine and has nothing to send back to Apple’s servers. First time I run it I need to right click and select Open to run the app, and this bypasses the entire signer system.