Yeah it does NOT look good at all… This is why I started testing and getting used to #BSD a couple of years ago…
Of course having #QubesOS as a daily driver makes all of this much easier! Also I think that the devs are super aware of infiltration, but need to catch up on everything there after half a year on other OS-es :-)