> (which generally purports to be "better engineered" than Linux, where sane behaviour for distributing binaries is a long-solved problem). Assuming your "sane

> (which generally purports to be "better engineered" than Linux, where sane behaviour for distributing binaries is a long-solved problem). Assuming your "sane behavior" is referencing .deb and .rpm files, both of those let you run arbitrary, attacker-provided shell scripts as root whenever you install, upgrade, or even uninstall a package.