A threat actor with code execution on a Linux desktop immediately has access to the filesystem and can do whatever anyway, in practice

No.

TempleOS is a marvel in many ways, but it’s not particularly useful to any normal person. I wouldn’t even say that Terry Davis was an asshole, because it feels wrong to hold a paranoid schizophrenic responsible for his manic episodes.