With Windows Baseline Security Mode, Windows will move toward operating with runtime integrity safeguards enabled by default. These safeguards ensure that only properly signed apps, services and drivers are allowed to run, helping to protect the system from tampering or unauthorized changes.

https://www.windowslatest.com/2026/02/12/microsoft-wants-windows-11-secure-by-default-could-allow-only-properly-signed-apps-and-drivers-by-default/