French government moving towards using NixOS

Curious selection, “strong isolation”, without a mandatory access control that you can update profiles globally?