I don't even want to know how many mission critical systems automatically deploy open source software downloaded from github or (effectively random) public repositories.
Unlike Windows, there is at least the option to use curated software distributions such as Debian or RH that won't apply random stuff from upstream repositories.
