From a security standpoint, I'm sure it's more complicated, but UBO and warning dialog boxes about downloading files to your device, logging into services without 2FA would probably solve a lot of those problems. Does a billion dollar corp have to be involved considering how much has gone into Linux from people's pro bono efforts?