The security of desktop Linux is just not there. Flatpak is a thing, but most users won't bother and they run all their desktop apps using the same uid and zero

The security of desktop Linux is just not there. Flatpak is a thing, but most users won't bother and they run all their desktop apps using the same uid and zero auditing or sandboxing. There is just no easy-to-use solutions, and none of existing mechanisms are default out-of-the-box. One may argue that running an application means you have to trust the developer/distributor/etc. But no, I don't trust a single binary because I don't and won't have a full knowledge of what it's doing.