its cuz they keep everything on google so they can use google lti for restrictions, enrollment settings, and the like, i actually went deep diving into ts and basically they have a huge plan for a shit ton of computers that are all managed to the admins whims and google LTI is how they do that
also if the linux setting wasnt locked we would be running exe files on our chromebooks