Security is layers, i utilize apparmor and firejail personally. And in fact 90% of widespread malware specifically relies on lazy people. Often targets default passwords etc

Sure, if they put in the effort. Most don’t even when Distributing malware

This is why you use a user agent switcher to lie about being windows. It’s a form of anti malware!