"I guess the problem is not local access but a malicious app perhaps, but then it doesn't matter too much anyway because there are other ways of compromising th

"I guess the problem is not local access but a malicious app perhaps, but then it doesn't matter too much anyway because there are other ways of compromising the system." Well, that's the idea - protect a user from malicious apps running within their security context. Qubes does this by running apps within their own virtual machines.