I first have this thought when comparing apt to snap on security, but I asked first on Quora.

Of course, this also includes

• On Windows, you are asked for Administrator rights upon install
• Not sure about macOS's Homebrew as well

Wouldn't it be better to be able to install most things without sudo?

Or, multiple levels of sudo, or switch user rather than sudo?

Some other thoughts are,

• I also realized sudo also involves logging, but I don't know how to check?
• Biometrics (fingerprint) for most basic logins, plus vanish-after-use recovery codes (like 2FA) for sharing admin rights.