Echoing: doing some "deep" troubleshooting of an issue on my Chromebook (since like 2006 + crouton/crostini), I read about their newer security/architecture for

Echoing: doing some "deep" troubleshooting of an issue on my Chromebook (since like 2006 + crouton/crostini), I read about their newer security/architecture for Linux apps running in chrome. https://chromeos.dev/en/linux/linux-on-chromeos-faq#why-run-vms-arent-containers-secure https://chromeos.dev/en/linux/linux-on-chromeos-faq#why-run-... ...see also the linked: "security" and then "glossary" to get a feel for the component complexity. It is pretty astounding, and astoundingly complicated, but mostly transparent as to how the host + guest integrate. Yeah, you can run "Inkscape" and the GUI just "shows right up" on the chromebook... but there's like 18 layers of security mitigations and complexity with virtualized device drivers and audited communication channels that are all (nearly) completely invisible to make it look like "it's just running /usr/bin/inkscape on the same machine, what's so hard about that?"