No jungle
Nothing on the machine is selling you anything — or rotting.
There is no account, no store, no telemetry, no per-seat licence, and no vendor living inside the system. And there is no package manager — so no dependency hell, and no plugin jungle to keep alive. What the machine runs is a closed list shipped in its image; nothing is installed at run time, nothing is discovered, and a change is a whole new image.
This also means the machine cannot rot. On an ordinary system — free or paid — packages update, break each other, and the machine you deployed is not the machine running a year later. A declared machine is the same machine on its thousandth boot as on its first, because nothing on it changes after the image is built.
An example
A shop's tablet running a payment app, a messenger, a video app and a browser is not a tool for the job — it is a distraction from it, and an open door for whatever the vendor wants installed next. Half the staff's day goes to keeping it working. A declared machine runs one thing: the job. There is no drawer to fill, no notification to dismiss, and nothing on it that anyone profits from.
What it refuses — and why that is the point
The jungle is not held back by a policy someone can relax later. It is refused by the grammar itself — there is no sentence in the language that even asks for a shell, a store or an installer.