I'm not an expert on windows or mac, but here's my run-down: > There is no strong sandboxing in the standard desktop. I don't know of any strong sandboxing in

I'm not an expert on windows or mac, but here's my run-down: > There is no strong sandboxing in the standard desktop. I don't know of any strong sandboxing in Windows or Mac OSX, but that could just be my ignorance. > Most programs are written in memory unsafe languages such as C or C++ This is true on windows and Mac as well (let's include objective-c in there). > It is a monolithic kernel written entirely in a memory unsafe language Also true of windows and Mac. > has hundreds of bugs, many being security vulnerabilities, found each month. In fact, there are so many bugs being found in the kernel, developers can’t keep up which results in many of the bugs staying unfixed for a long time I don't know enough to comment on this. > a compromised non-root user account with access to sudo is almost equal to full root compromise Is this any different on windows or mac? Mac has sudo as well, and on windows, the main user is typically an administrator. > X’s lack of GUI isolation well, yeah. I don't know what the situation is like in windows and mac for this. But one of wayland's design goals is to fix this (although it also breaks things like screencasting...)