Built-in protection mechanisms (antivirus, stability, isolation and snapshots)

Independent isolated copies of software allows user to safely run apps with more limited privileges, compared to classic “everything but kernel stuff” concept. Removable devices are not touched until explicit user permission granted.

Rolling release model ensures that core files are kept untouched and are impossible to infect.