Just a note that linux is ridiculously unsecure in the default daily user mode. You have no sandboxing, everything runs as the same user with the same privileges, etc. Just a rogue app writing a single line of code (with no permission problem at all) to bashrc can basically do whatever it wants on your computer, including screensharing, key logging, encrypting your whole home folder, sending ssh folders to somewhere. The only thing it can’t do is install a goddamn video driver (as per the relevant xkcd comic) — but with keylogging it will see the sudo password sooner or later.

Fortunately, Fedora does have SELinux, which makes it a bit better but a proper sandboxing solution is way overdue (firejail and flatpak are not necessary the best solution, it should be automatic). Like, at least copy what android does on the exact same OS.