"Lax" depends on what your code is doing. If it's protecting nuclear secrets or the personal information of hundreds of millions of people (as in the case of A

"Lax" depends on what your code is doing. If it's protecting nuclear secrets or the personal information of hundreds of millions of people (as in the case of Apple), then yes, deploying Linux is absolutely being lax with security. The kernel itself has had thousands of security vulnerabilities, with userspace on top adding tens of thousands more. If you're writing software for your smartwatch, then maybe Linux (or node/apache, which are built to lesser quality standards) is OK.