[gsnedders]

How many distros are shipping with ASLR now? Last I knew there were still major distros that weren't.

Heck, do the common DEs sandbox their search indexing processes yet, given there's been various vulnerabilities there previously?

Yes, okay, you have control, but when nobody implements relatively basic defence-in-depth mitigations that have been available on Windows (especially) and macOS for over a decade it's just sad and undermines the argument that its security is better.