saw the latest m microcode update debacle. rip my ryzen cpu hah :')
u can allow linux to do it, u can also not allow it.. depends on what u allow really :'). tho, ofc vuls exist and ppl might yet find a way. also u can edit ur kernel etc. to stop certain features. disalow kmods being loaded etc. etc. its not as easy to find holes on a properly configured system as windows. tho its quite hard to do a proper config especially if u want to do gaming and want wine to run etc.