You’re mostly right, but I disagree about the bit about paid software and vetted developers. Open source like Linux is also mostly developed by programmers hired by companies, so there’s no difference there. Proprietary software has also had problems with malicious developers and there’s less transparency there.

Desktop Linux so far was meant to be a fun general purpose computing experience for geeks. Throwing extra security layers on it evidently spoils some of that fun, you can see how Linux nerds react to things like Polkit, SELinux, Wayland or Flatpak. But PCs in general suck at security, they’re based on legacy tech from an era when cybersecurity wasn’t even a concept.

Huh, I’ve been following “This Week in GNOME”, didn’t realise KDE is doing the same thing. Thanks for sharing, I’m gonna follow both, it’s nice to see progress in Linux desktop, even if it’s not my personal choice of software.

Security

When you use X11, you allow any program running on your computer to access anything on your screen and clipboard, collect your keystrokes and type. It’s trivial to implement a keylogger, for example. Do not buy into the whole “no viruses on Linux” thing, it’s not true and likely to become even less and less true, as desktop Linux is becoming popular.

Wayland at least tries to put some barriers in place against this.