What Windows actually does: [Block signed programs from running](https://learn.microsoft.com/en-us/windows/apps/develop/smart-app-control/overview) [Block unsigned programs from running](https://learn.microsoft.com/en-us/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/)