Microsoftevery other OS OOBE walks users through creating root + standard-user accounts... But Windows, noooo. Unless it's an enterprise managed device, by default, users are led to use the Administrator user as a daily driver. And so many do, that a whole industry of software publishers, many still writing apps under a pre-Windows95 security model, just expect that their users will be members of Administrator Group (the apps fail miserably if they are not). And now, Microsoft is perpetuating this situation while making actual admin work more difficult: more likely to have a legitimate administrator be blocked, because Microsoft too, just assumes everyone is an admin. Windows gave us multiple users and account permissions in 1993. 30 years later, most small business users don't use it, BECAUSE Windows default is STILL, NOT TO USE IT. THIS describes the security status of many small medical practitioners such as Dentists, Optometrists and Chiropractors, who are supposedly following HIPAA regulations to safeguard patient data, but since it's impossible to implement Least Privilege... every workstation using an Admin account... what could possibly go wrong?
Your post is a fundamental misunderstanding of the security model, but captures the part where software vendors are still operating under pre-Windows 2000 security setups. Interestingly, this happens not because Microsoft made it bad, but rather because every piece of software you use on Linux is a curated package distribution system maintained by an army of distribution maintainers whose sole job is to do exactly that--to modify upstream software to ensure it fits within that distribution's security model.
For example, Nginx on Redhat systems uses the "nginx" user, while on Ubuntu/Debian systems it uses "www-data". It's not like you're going to nginx's website, downloading binaries, and installing them manually and having to choose where to install them. It's curated.
You are operating in an extremely glorified and highly curated distribution-specific app store. Of course things are going to integrate a little bit better.
Your post is a fundamental misunderstanding of the security model[...]
Your post is a fundamental misunderstanding of the post you answered to... :-D What you said has NOTHING to do with the default admin account created as part of Windows OOB setup. Your example with curated app stores and different NGINX users doesn't change a thing about that NGINX doesn't run using a local system account, but a dedicated, more specific and restricted one etc.
