Question, is that how MacOS works?

OS and security is one thing. Who you trust is another thing. On their mobile OSes, Apple artificially conflates the two to keep you listening to them out of fear of losing security, when they know damn well jts entirely possible to provide a secure OS that lets you choose to trust someone other than them for everything else.