Fair point, but,

assuming big companies are more capable of doing proper security is just flawed way of thinking

Well, Apple and Google have a pretty good track record on that, as records go. Sure, a security nutjob might do better; and the FOSS community has done some amazing and well-trusted things, but not every contender is the same.

As a bit of a oblique example, I have games in Epic store. Now they (Epic) want to install kernel-level drivers, which I'm not sure I'm willing to accept. If they simply weren't able, they'd simply do without. I'd rather have Microsoft's malware than Microsoft's plus Epic's. (Side note, apparently I can use an alternative FOSS launcher so that's great!)

And still, I prefer it this way - I'd like to have kernel level control on my computer than for Microsoft to 'protect' me by disallowing it. But my non-techie friends? I'm not always sure. Especially those in more hostile environments.

(As another aside, anything that matters on my computer is in Linux and encrypted; but the recent exploit using a bios splash image opens up interesting new inter-platform vulnerabilities.)