It has its flaws, like any other system. But it is a lot more secure ootb than most peoples' Windows installation, for example.

Is that a low bar to clear? Yeah, I guess. But it clears it by quite a margin.