@lxo @lxo well ofc u can check compilers but reverse engineering allows to see what it did to the code it compiled. Also youre very wrong to say low hanging fruit in standard linux are gone...(Chromeos and Android are different) Unless u put lots of effort into it it lacks sandboxing...Linux also lacks the now legacy and everywhere used W^X exploit mitigation (incase it isnt clear not having W^X is ridiculously idiotic),Linux also has NO protection for uninitialized memory outside of-