And the path to this, is to raise a constant stream of vulnerabilities. Therefore you need a constant upgrade from upstream. Therefore insurances only cover you if you are using a maintained system. And since there are distributions with vulnerabilities, insurances will only insure you for public service if you use a few pre-approved OSes.

Or just use the cloud provider who has all the preapproved workflows. The world just needs a little notch to tip into regulating the provision of services to the public, and at that moment, any independent OS will be dead, and we’ll be forever tethered to the cloud.

“He didn’t use a safe OS”, we’ll say, of everyone using an independent Debian version and meeting a vulnerability. “It’s only fair he’s the hammer fell on him.”