Agreed, though I think privacy strictness that disallows certificate checking might just skip MacOS entirely.

Privacy defaults on Apple systems are generally good — at least most potential risks are opt-in rather than opt-out, which the majority of vendors prefer — but without lockdown engaged MacOS has a lot of I/O that might not pass the strictest audits.