INFO

This post is not about politics.
Don't give a shit about politics --KoЯn © 2005

The facts

Omarchy is based on Arch Linux and uses Hyprland, a Wayland compositor. The pre-installed software set includes a firewall configured to allow OpenSSH usage and closed-source applications like Obsidian. The organization established to fund and oversee Omarchy, the Omacom Foundation, gains $18 million in backing in one year and a few months. In Linux history, it's the first time that a distro win so much backing so fast. While this sounds good at first, there is something wrong with Omarchy security according to this link. Indeed, Omarchy users have noticed that OpenSSH is kept at its insecure defaults. The devs don't follow the Arch wiki recommendations. This opens up Omarchy users to brute force attacks that would not be possible by default on Windows and MacOS. In addition, Omarchy devs have weakened its security by increasing the number of password retries and decreasing faillock timeouts.

Conspiracy theory

Omarchy insecurities could be on purpose. Corporate-backed hackers may steal Omarchy users data and do illegal e-commerce on the dark web. Companies funding Omacom may participate in this business to monetize users sensitive data. Most of the companies funding Omacom are already doing e-commerce or data monetization, aren't they?