Omarchy is full of security holes

Security vulnerabilities were discovered in Omarchy version 4.0, raising concerns about the operating system's safety. Some of the issues include video title bash injection and the ability for notifications to execute arbitrary bash commands on a user's machine. The developers have acknowledged these problems, but the recurring nature of security flaws suggests a lack of care for system security.

DHH, a key figure in the project, has been criticized for his marketing tactics, which focus on impressing users with polished experiences and highlighting resolved security issues in subsequent releases. However, this approach appears to mask the project's poor security practices. The marketing team seems disingenuous, emphasizing iteration on dotfiles over basic system security.

Critics argue that Omarchy doesn't treat security seriously and warn that many companies may ban its use due to the high risks involved. The team's lack of transparency in explaining the actual risks to users further fuels concern. The author urges readers not to be deceived by the project's image and to be cautious when using Omarchy, as the potential security risks could lead to significant harm.