It’s unlikely that anyone could really leverage a vulnerability within the Bazzite OS Build updates and sneak something malicious in there…That is the reason why nobody is really talking about it. Some of the measures used are discussed at the link that I put here.
There is always a slim chance of it happening though; I am sure that people understand the reality of supply chain attacks and know when a malicious actor is determined enough, they’d find a way. If this concerns you so much, wouldn’t it be wiser to use a distro that doesn’t automatically update? One that simply checks for them and allows you to decide if or when you’d like to?
A healthy amount of caution is just right for anything OS related, but, you seem a bit too worried about it.




Yeah, that is why I read everything before deciding on installing anything. As a user, if you trust a distro enough to install it directly, you have to be aware of all it’s features first. Yeah, personally I wouldn’t keep an unsupported feature enabled for any length of time, that is just asking for a preventable breakage (though easier to rollback with Bazzite or any distro with Snapshots).
If it does bother you enough, it might warrant a distro change…I still say it’s not a huge deal. The atomic nature of Bazzite is one of its greatest strengths as there are inherent security advantages. Nothing is absolutely immune to cyberattacks or malware (as there are numerous paths to exploit) but immutable distros are a good and solid thing!