Uh, .NET is free open-source software. Have a look at this 1500-line package-lock.json: https://github.com/dotnet/runtime/blob/main/src/mono/wasm/runtime/packag

Uh, .NET is free open-source software. Have a look at this 1500-line package-lock.json: https://github.com/dotnet/runtime/blob/main/src/mono/wasm/runtime/package-lock.json https://github.com/dotnet/runtime/blob/main/src/mono/wasm/ru... And even if you ignore that: what about the browser you use to install it? The library you use to decompress the file? The library you use to checksum it? The dependencies you install when you write code in .NET (which is the entire problem here and is literally no different whatsoever in .NET, aside perhaps from differences in the size of their standard libraries)? I'm sorry, you're right to say that this is wrong and that the ease of installing malware is terrifying (and not nearly enough acknowledged), but there's no lazy magic bullet that will save you. Welcome to combinatorial explosion!