No honest engineer (to be clear I am not one!) should claim that any programmable device is 100% immune to undiscovered vulnerabilities.
KeyOS does not treat installing an app as blanket trust. Each app declares the capabilities it needs. Some basic capabilities are automatically available, while a...