all OSes have malware level capabilities. it's literally the definition of an OS
That still wouldn't affect projects like Debian or Arch, but going even further, they can't push through updates anyway. Nothing forces me to install updates, it's an active choice to do so.
In the meantime we might try think of a solution.
all OSes have malware level capabilities. it's literally the definition of an OS