ChromeOS seems very interesting to me because it has managed to achieve a degree of security that no other desktop OS (Windows, macOS, and of course other desktop Linux, which are the least secure of the bunch) can even approach. It has been designed from the ground up to be secure: https://chromium.googlesource.com/chromiumos/docs/+/HEAD/sec...
- Web pages loaded on Chrome have no access to the device's filesystem, nor to user files.
- Android apps run inside a restricted container.
- Linux apps run inside a VM, which leverages KVM and a custom Rust VM monitor.
I think it'd be great if someone made a de-Googled fork of ChromeOS without all the Google telemetry and bloatware, because it'd be the perfect Linux distro for security-conscious individuals.
- Verified boot backed by TPM.
- System services are heavily sandboxed: https://chromium.googlesource.com/chromiumos/docs/+/HEAD/san...
- New userspace is written in Rust: https://chromium.googlesource.com/chromiumos/docs/+/HEAD/dev...
- Web pages loaded on Chrome have no access to the device's filesystem, nor to user files.
- Android apps run inside a restricted container.
- Linux apps run inside a VM, which leverages KVM and a custom Rust VM monitor.
I think it'd be great if someone made a de-Googled fork of ChromeOS without all the Google telemetry and bloatware, because it'd be the perfect Linux distro for security-conscious individuals.