You have to be looking for faults in the language to be concerned over something like this. I know everyone isn't the biggest fan of canonical, and there are go

You have to be looking for faults in the language to be concerned over something like this. I know everyone isn't the biggest fan of canonical, and there are good reasons why that is. But they aren't trying to mislead anyone here. You can't possibly try to fault Canonical for X11's "security problem". I don't know enough about either platform to respond to your OSX comparison. But if the concern is that they don't isolate enough then you are entitled to that opinion. But overall this is an improvement in this regard (whether or not its an improvement to the overall package management system is open to interpretation).