As a long time Linux enthusiast and engineer this needs to be said and it's been overlooked for way too long. We need to figure out how to move past some of the

As a long time Linux enthusiast and engineer this needs to be said and it's been overlooked for way too long. We need to figure out how to move past some of the traditional UNIX ways of doing things like apps keeping plaintext passwords in 'hidden' dotfiles. Even simple things would go a long way like making it straight forward to install packages from distro repositories in userspace. Every time you install a desktop app via the package system you're rolling the dice by giving the package root access. In fact that should be the default behavior for installing the vast majority of Linux apps. If an app doesn't legitimately need root access for anything we shouldn't grant it to begin with. Don't get me wrong Linux distros do a great job at maintaining security overall but these projects are massive now and in the age of supply chain attacks and hostile nation-state actors all it will take is one package to slip through to cause a major security incident. The Solarwinds hack was the proverbial canary in the coalmine. If it can happen to them it can happen to anyone. It's not a matter of if now but when.