The nice thing about the Mac is that you can run a lot of unix tools natively. But of course, anything that runs on your Mac is a potential security hole. Obvi

The nice thing about the Mac is that you can run a lot of unix tools natively. But of course, anything that runs on your Mac is a potential security hole. Obviously all 3rd party apps that you use can compromise security. But it can also be your own code: If eg. your rails app has a security vulnerability, which is common during development, and you run it with your local user, as is common during dev, then that vulnerability can potentially compromise all your data. So if you want to be safe, run all your dev stuff in VMs or on a separate device, or in a container or something. Of course, that is cumbersome, and whether it is necessary or not depends on what kind of threats you expect...