That's a heck of a optimistic outlook for the future. Experience has taught me to be much more pessimistic about the future, especially when it comes to avoiding the repeating of the past
Unfortunately until Windows changes, the best way for them to serve customers is to continue to inject kernel code. (This is no longer needed or even permitted with macOS.) They did screw up operationally, but one problem made the other much more likely and dangerous.
Why limit yourself to Windows? My enterprise-issued mac is very noticeably slower and suffers from weird crashes and reboot-fixes-things issues that my own personal mac has never had.
they also screwed up Linux before they did that on windows.. The problem here is they are a spyware that pushes whatever code they want to your (precisely your company) devices without test etc. It's just a matter of time for it to blow up.
The Linux kernel panic issue was different in many ways (in this case, the bug was in the Linux kernel used by a particular RHEL release), but your point that it needed further testing before pushing it out to production is still valid.