> Linux people are very serious about things like supply-chain verification, auditable software, and machine activity monitoring. All actions with viable engine

> Linux people are very serious about things like supply-chain verification, auditable software, and machine activity monitoring. All actions with viable engineering principles and real impact, differently from the "you need to install an antivirus" insanity. Some sysadmins, sure, but definitely not all. Seriously, there are a lot of CentOS/RHEL 6 and below or Debian 8 and below running PHP 5.x that are still live on the internet, with vulnerabilities and all that have been fixed in that specific version. Saying that all Linux-based people care about security is ignorant of one-click offerings from various hosting sites, and those who don't care if they're running Linux or Windows in the name of hosting a site.