> That's the job of traditional Linux distros. I share this view, but I also think it's very difficult to verify such validation is happening. I don't think mo

> That's the job of traditional Linux distros. I share this view, but I also think it's very difficult to verify such validation is happening. I don't think most end users would want a distro stable enough to meet a high review bar. > That does nothing when it comes to E2EE Not all components need access to the keys or user data. Reducing attack surface reduces the amount that needs to be validated.