In my opinion the less control the average user has over a AV/AM the better as most have fingers that don't understand
Security should not be an option for ANY users. It should be imposed.
Unmanaged devices should not be permitted by law, regulation or a government policy.
As some users like lots of bells & whistles & knobs to turn & twiddle even though they have little understanding of what they are doing?
This is because security knowledge is not a societal priority.
Global societal priorities are sports, "productivity," profits, over-eating, not exercising, wasting time gaming & social media, and so many other things. Security is always an afterthought.
Like most things in life, dramatic change does not happen until a calamity or huge negative impact happens.
Digital security - despite trillions of dollars spent - despite all the security and regulatory frameworks - is largely a failure because it is upon the organization or the individual to be accountable & responsible for implementing it, testing it, maintaining it, break-fix it, support it - and gain all the knowledge necessary to accomplish these goals & objectives.
People do not do what is in their best interests. All you have to do in most any country is take a walk and you see 50+% of everyone you see has a BMI of 39.
Digital security should be guided by laws, regulations and government policies that mimic the same level of priority and urgency as a highly impactful public health crises such as COVID. Because the world is interconnected and what a person does on their system can literally affect hundreds of millions of people in the worst case scenario.
Things will never change until a global calamity happens. Some security event brings down entire national electrical grids or borks the entire financial system and people cannot get their money. The best thing that can happen is hackers target billionaires and top politicians, and steal their money through hacks. If that happens, then you will see action. Will it be enough? Probably not.
The rules & requirements to obtain a driver's license are far more strict than basic security requirements. Which of the two is more dangerous - which of the two has a far-reaching affect - a vehicle or a computer? The correct answer is based upon common sense - the most globally impactful device in terms of security is a digital device.
Security is not software. Security is a process. That process needs to be imposed upon the general population and enforced because humans that are given options are going to be non-compliant and create risks that extend to millions of others.