noone wants to do because developers want the latest and greatest model.

That’s not true at all, the OS doesn’t have, and shouldn’t have, everything that every random npm package has…

The alternative isn’t for the OS to do it: its to implement everything yourself… Speaking previous from experience working at a company that did exactly that… It has its own set of problems… But it is at least secure 😅