[worksonmine]

> So I'll have to create another user account to run a web browser, my mail client, a software package manager or a compiler?

If you can't trust those you have bigger problems than them reading your home directories. If you're paranoid use flatpak.

[pdonis]

> If you're paranoid use flatpak.

I don't think this is a good solution, both because the so-called "sandboxing" isn't all it's cracked up to be, and because you now have to depend on each individual app vendor to push you security updates, instead of just your Linux distro.

The really paranoid would probably be using BSD with jails, which AFAICT is one area in which the BSDs are ahead of Linux.

[cjk2]

They're all written by idiots in C. Why would I trust them?

[pdonis]

By this criterion you shouldn't trust Windows either.

[worksonmine]

Like the rest of the OS from kernel to most of user-space. You're making solid arguments and completely missing my point.