At last I’ll be able to get a decent accuracy score despite my oyster-like reflexes :)

Thanks a lot for this detailed, understandable and kind answer :)

The article talks about sudo and doas being SUID binaries and having a larger attack surface than run0 would. Could someone ELI5 what this means?

Thanks for the info!

Is there some drama I’m not aware of here?

You also need full root access to you bank’s machines.

For the execution, can’t you configure the fstab with noexec on partitions where the user has write permissions and give the user read-only permissions on the root partition ?

I think this would be fine for most jobs, the exception being software development where you usually need to execute stuff to test your programs.

Please stop posting good reasons to use Linux, I already feel bad enough for the poor people stuck in Win$ and MacO$