[aseipp]

Here is an incomplete paper that gives a 50,000ft overview: https://www.chromium.org/chromium-os/developer-library/refer...

The average Linux desktop does not even come close to having a design as thorough as this, much less a full-blown, actually usable implementation of said design. Frankly, 99% of Linux desktop installs used by developers I've ever seen are nothing more than single-user systems with everything running under a user account that is morally (and in practice, technically) equivalent to root.

The bar for desktop security in the Linux world is actually very, very low.