Qubes OS

Which company was it?

cvedetails.com/vendor/5632/Windows.html

cvedetails.com/product/32238/Microsoft-Windows-10.html?vendor_id=26

cvedetails.com/product/17153/Microsoft-Windows-7.html?vendor_id=26

most of these don't even affect qubes

The cathedral development model doesn't make the project nonfree though.

Wow, this is retarded. You can use SELinux with Qubes, and isolation like chroot jails often share proc,gui,dev,kernel, etc. meaning there is huge attack surface per process compared to Qubes (Which would primarily be hypervisor attacks and hardware level like rowhammer).

you could just change the templates to not use "user ALL=(ALL) NOPASSWD: ALL" if it really bothers you.