Security doesn’t work like that and I find it important to share the insecure nature of most linux distros with many people, hopefully to make it improve one day.
Currently a make install can do literally anything to your computer besides installing a video card driver (as per the old xkcd comic) and sure there is firejail.. but let’s be honest, how often do you use it? Defaults matter, and thus linux is insecure.
Also, again, how is osx locked down? What’s a concrete thing you can’t do on it?
It comes by default on plenty of distros and people don’t even notice the change.
In the meanwhile, nvidia doesn’t support the linux kernel itself (though it is changing slowly) that’s why it can’t support wayland.