its still pretty raw. check out cve-2015-8660, which basically let unprivileged users bypass normal file permissions without even trying. it's fixed in mainline now, but still hasn't hit a lot of distros.