In a way it's worse than Windows now. Microsoft doesn't lock parts of the filesystem or prevents you from editing files. As an example, I like to change /etc/ssh/sshd_config to permit only pubkey authentication. But even since Catalina it deletes any changes to this file with any system update.