They tried with Windows RT. It was UEFI system, booting only Windows. That booted Windows went even further, allowing to run only signed binaries.

Market rejected it. At the time, there was an alternative. What are most people going to do, when there is not?