Partially correct because Linux is running under a sandbox and all applications within Linux are in that sandbox.

My comment about "school systems and corporations" did sort of imply "managed"; there's not a public school system in the world that would give their students unmanaged Chromebooks. Some private schools might, but the private schools are also more likely to have it tightly controlled and install spyware because of the "threat of cyber-cheating" (I wish I were kidding: https://www.eff.org/wp/school-issued-devices-and-student-pri...).

My apologies on the snark — it’s too late to edit it, but I read your "iDevices" as snark itself, since most of this discussion has been populated by people who have reflexive anti-Apple stances with exactly no nuance on their stances, so I let my frustration get the better of me. Mea maxima culpa.