Google really owns the laptop as it sits on the user's desktop, in terms of how software runs on that machine. This allows the company to provide a much better security profile than other systems.
Google also requires that all ChromeOS devices use secure boot, ensuring the machine boots up without any malware. The OS utilizes strong sandboxing for each app/web to prevent in-app exposure to risk.
[
Collection
]
[
|
...
]