> Linux isn't like macOS, it doesn't have any kind of proper desktop sandboxing architecture that really works.

As a QubesOS user, I beg to differ. Just because most Linux distros are negligent with sandboxing does not mean all of them are.