Linux desktop is completely insecure, the unix permissions are meaningless for single-user systems (an npm install can steal/encrypt all your family photos, ssh

Linux desktop is completely insecure, the unix permissions are meaningless for single-user systems (an npm install can steal/encrypt all your family photos, ssh keys, browser config). That same model is applied for pinephone, with an insecure hardware (physical access means complete control, no secure boot, a single SD card swap completely compromises the device)