Relevant to this ever-burning discussion, I think this is starting to become somewhat of a red herring/false dichotomy: you can actually mostly enjoy both via a spectrum of well-designed security settings.
I think MacOS on M-series strikes a very good balance between integration and customizability. The key settings are enabling system extensions (which allows signed driver-level customizations) and then one step further, disabling SIP, which enables running unsigned code (mostly for development and testing). I’ve tested the various system enhancements, tweaks and beta software always feeling in control and never unduly restricted.
This is one of the reasons why the debate about the MacPad rages forever on, the architecture for a flexible environment is there, but the ‘philosophy’ remains locked in the walled vs. open mentality.