> In Qubes, you typically don't care if your untrusted application compromises the (untrusted) virtual machine. For that to be true, one would have to run each

> In Qubes, you typically don't care if your untrusted application compromises the (untrusted) virtual machine. For that to be true, one would have to run each application in a dedicated VM. A great idea, but Qubes does not recommend that for efficiency reasons. It does pose performance and usability challenges which is why most people do not use it that way. So yes, you do care about applications in single VM not snooping/manipulating each other. Luckily there are standard unix and MAC mechanisms to isolate them.