Most of the Windows malware gets deployed by some user downloading and executing random files they downloaded on the web. Since installing applications on Linux is usually done through some centralized package manager or app store (Flathub), it almost entirely eliminates this attack vector. Running random scripts from the internet by downloading them using curl and piping them into sudo bash is a whole nother issue though. Noob-friendly distros like Ubuntu should IMO have some safeguards in place to block these actions.

[–] pixelscript@lemm.ee 2 points 5 days ago

Since installing applications on Linux is usually done through some centralized package manager or app store (Flathub), it almost entirely eliminates this attack vector.

xz moment.

Yes, I see that weasel word "almost" in that sentence. I expect it's going to be doing increasingly heavy lifting as Linux becomes a more lucrative target to attack over time.

Your point generally stands, though. Even if they're fallible, at least someone is vetting it at all somewhere in this pipeline.