Windows 10 S offers a highly secure workstation environment, as users are prohibited from installing any software.  Only specially authorized apps branded, approved, and published at the Windows Store can be installed by administrators making these devices much more secure than normal workstations.

https://redmondmag.com/articles/2017/09/27/windows-10-s-hardware-aimed-at-firstline-workers.aspx

Microsoft Announces Windows 10 S Hardware Aimed at ‘Firstline Workers’. Microsoft announced on Tuesday a new line of Windows 10 S devices that are low cost and secure for employees in positions where they are the first contact to the public.  These devices are also designed to be managed through Azure Active Directory and Microsoft Intune out of the box. Future updates will include Windows 10 Enterprise capabilities, including Application Guard, Credential Guard and support for Cortana and other centralized management tools through a Microsoft 365 subscription.

A major focus on the new line of hardware will be on security due to these devices only being able to run apps built on the Universal Windows Platform. That ensures that each app downloaded to the device must go through the Windows Store’s vetting process for security. And the inability to download outside third-party apps should cut down on ransomware and malicious attacks, the company said.

While many new devices with the Windows 10 S branding are in the works, Microsoft showed off at Ignite four upcoming devices, including the HP Stream 14 Pro (available in October for $275), Acer Aspire 1 (available Q4 for $299), Acer Swift 1 (available Q4 2017 for $349) and the Lenovo V330 (available February 2018 for $349). Microsoft and OEMs have yet to share hardware specs of these devices, but with the first devices arriving in a few weeks, look for details to emerge shortly.