Linux

All right, so thinking in solutions here—sandboxed applications, no password prompt for updates, and a more alert-y warning when a password prompt is shown. Surely there's a distro that does the first two things, already?

And also, if no password is needed for updates, the average user will never see a password prompt. Which would make a clandestine .sh file with a password pop-up inherently more worrying.

I'll have a look-see at some modern distros, I'm pretty sure the no-password-updates is quite normal these days. Also, that does seem to remove some of the necessity of sandboxed applications, if all applications are installed though the official repositories.