Omarchy 4.0 ships with a pile of security holes
Omarchy development practices lead to predictable security issues

A security researcher warns against using Omarchy, the Linux distribution promoted by DHH, citing a series of severe vulnerabilities in version 4.0, including bash injection via video titles and arbitrary code execution through notifications. The post argues that Omarchy's development practices prioritize speed over security, and criticizes DHH's marketing as disingenuous, suggesting that the project's security team announcements are little more than PR.
You can't get to a reasonably secure system by starting with a pile of bash slop and hoping others will catch and fix the issues before they are exploited.