> The only other alternative is turning your computer into a glorified phone (a.k.a. a locked-down media consumption device) where everything is nicely sandboxe

> The only other alternative is turning your computer into a glorified phone (a.k.a. a locked-down media consumption device) where everything is nicely sandboxed and nothing has any kind of permission to do "bad" things. Your understanding of security research is badly out of date. Turns out that, since the 80's, we've found a lot of ways to make computing platforms much more secure while sacrificing little flexibility. For instance: capabilities. Apps working under a capability model get denied access to resources by default. If you later determine that yes, you want a program to be able to access the internet, then you can grant it that capability...but, say, only while the program is running, and you can revoke it at any time. The dichotomy of "either malware or a locked down media-consumption device" is completely false.