This is pure gold

Yeah, Wine is not a secure container. Don't count on it for security.

runs wine as root yolo

unless you have it sandboxed in a flatpack container

Remember: update early, update often - no matter how painful that sounds.

Not anymore! Supply chain attacks have become so common that it's prudent to wait at least 7 days before updating to prevent installing malware from compromised update infrastructure.

Compatibility layer. Wine Is Not an Emulator.

I read a hilarious article, probably 2 decades ago by now, where a guy decided to try running Windows viruses on Linux in Wine.

If this really is a threat today, I would say that Wine has become a pretty damn impressive project. Here's the link in case anyone else wants to read it: https://entertainment.slashdot.org/story/05/01/26/219201/running-windows-viruses-under-linux

We need to get proton for templeos so we can be safe.

yea, I play pirated games via flatpak bottles in hopes that getting out of the sandbox would be far too much work for the possible gains.

Hmmmmmm, maybe then the virus shouldn't use GTK dialogs for opening files and call open(3)? hmmmmmmmmmmmmmmmmmm

I'm sorry Linus Torvalds is personally trying to destroy your PC

you can remove the Z drive letter, but that's not enough. Nothing prevents a windows program from attempting to call linux syscalls

Flatpak bottles can use wine in a sandboxed environment. Both flatpak and bottles have ways to restrict access to parts of the filesystem.

kinky.

Yea im pretty sure thats the point. The virus will get a drive that has nothing but the infected game on it.

more correctly every wineprefix. Depending on how you install games, they might not be running in separate wineprefixes, but I believe steam does it that way

Well, how else do you want to achieve 100% compatibility? Don't discriminate the viruses like that!