This doesn't seem like a "desktop Linux security" problem. It is a desktop Linux security problem, because people will want to install applications that are no

This doesn't seem like a "desktop Linux security" problem. It is a desktop Linux security problem, because people will want to install applications that are not available in a distribution. So, you should provide a mechanism to let them do that relatively securely.