The root cause of everything is the broken security model from Unix that underlies everything in our ecosystem.
How we managed to avoid reality and keep this co-dependent relationship going this long is a sad, sad tale.
We need an intervention. It shouldn't be unreasonable to want to be able to download some code, tell your system to run that code against a set of capabilities, and be able to trust that those capabilities are the only things that will be affected.
We have a modern electric grid, which lets you take any random lamp from a thrift store, or curbside garbage can, and plug it in to your house, and know that doing so won't burn your house down, no matter how poor the shape of the lamp. Why? Because of modern circuit breakers designed to protect the user and the wiring of the house.
Why can't we have capability based security? It was invented 50 years ago! It can protect the user, and the operating system, all in a usable, friendly manner.
https://en.wikipedia.org/wiki/Intel_iAPX_432
but it was really the 286. A counterexample is
https://en.wikipedia.org/wiki/IBM_AS/400
which is a nice system and still around today but definitely niche.