I'm betting either one of the over the air WIndows 10 updates is going to introduce the same thing (application isolation and explicit resource permission control) or else WIndows 10 will not really be the last version ever.
Windows 10 already does this with the Privacy settings section, as long as it's a "modern" app. Not sure they can do anything about "desktop" apps using the legacy Win32 API as said API doesn't really have any support for sandboxing/permissions.
I just finished upgrading to WIndows 10.
All of the settings are on by default, you have to explicitly find them and disable them, one at a time. It's called negative optioning. That's not the same thing as being off by default and having to enable them expolicitly one at a time as an application tries to use your information or resource. It's what Canonical got called on when we provided the ability to search the internet from the Dash by default, even though it was one simple checkbox to disable.
WIth our new OS, we also handle legacy applications because they run isolated and confined. There is nothing technical stopping Microsoft from doing that, unless maybe it requires a complete kernel rewrite or something. I suspect it's more likely either a policy decision or an engineering resource allocation decision (based on policy), and you will see legacy application isolation starting to arrive in a year or so when enough stink about data stealing has been raised.
Also, none of my settings were carried across from Windows 8.1, and I had to search for and install drivers for my hardware. I've never had to do that with Ubuntu and it's the same hardware. I don't think Microsoft Windows is quite ready for the consumer market yet. I'll stick to Ubuntu on all my phones and PCs except for the one games-only console in my living room.