On the workstation part, it recommends QubesOS.<p>Am I the only one who is skeptical about it?<p>From what I saw superficially reading their source code, there are some frightening stuff going on:<p>* tons of C code with nearly zero unit tests, same with the python code<p>* lots glue in form of bash or python scripts<p>* some not so beautiful stuff like:<p>- <a href="https:&#x2F;&#x2F;github.com&#x2F;QubesOS&#x2F;qubes-core-agent-linux&#x2F;blob&#x2F;master&#x2F;vm-init.d&#x2F;qubes-firewall#L29" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;QubesOS&#x2F;qubes-core-agent-linux&#x2F;blob&#x2F;maste...</a> (kill -9 on a daemon...)<p>- <a href="https:&#x2F;&#x2F;github.com&#x2F;QubesOS&#x2F;qubes-core-agent-linux&#x2F;blob&#x2F;master&#x2F;vm-init.d&#x2F;qubes-firewall#L18" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;QubesOS&#x2F;qubes-core-agent-linux&#x2F;blob&#x2F;maste...</a> (a daemon is a little bit more than an exe launched with &#x27;&amp;&#x27;<p>- <a href="https:&#x2F;&#x2F;github.com&#x2F;QubesOS&#x2F;qubes-core-agent-linux&#x2F;blob&#x2F;master&#x2F;vm-init.d&#x2F;qubes-core-appvm#L34" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;QubesOS&#x2F;qubes-core-agent-linux&#x2F;blob&#x2F;maste...</a> (changing a config file in an init script, humm, weird...)<p>- <a href="https:&#x2F;&#x2F;github.com&#x2F;QubesOS&#x2F;qubes-core-agent-linux&#x2F;blob&#x2F;master&#x2F;vm-init.d&#x2F;qubes-core-appvm#L32" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;QubesOS&#x2F;qubes-core-agent-linux&#x2F;blob&#x2F;maste...</a> (starting a service inside the init of another service...)<p>- <a href="https:&#x2F;&#x2F;github.com&#x2F;QubesOS&#x2F;qubes-core-agent-linux&#x2F;blob&#x2F;master&#x2F;vm-init.d&#x2F;qubes-qrexec-agent#L13" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;QubesOS&#x2F;qubes-core-agent-linux&#x2F;blob&#x2F;maste...</a> (&quot;logging&quot; with stderr redirection in a file)<p>And it&#x27;s just the init scripts... I&#x27;m too lazy to take a look further inside the C or python stuff.<p>IMHO, as a proof of concept, it&#x27;s interesting, as a finished, reliable and secure OS, it&#x27;s frightening...