1.Being a public domain library, likely used in many other proprietary products, I doubt the xz library would have targetted linux systems only. It may have been the first target because Linux provided a very large blast radius but it might just have been the beginning of a broader rootkit.
So I wouldn't call the xz incident as linux specific.
2. I don't know why you oppose Microsoft, a provider of online services in the cloud with Linux, a small piece of software or an OS family depending on your definition.
Comments
1.Being a public domain library, likely used in many other proprietary products, I doubt the xz library would have targetted linux systems only. It may have been the first target because Linux provided a very large blast radius but it might just have been the beginning of a broader rootkit.
So I wouldn't call the xz incident as linux specific.
2. I don't know why you oppose Microsoft, a provider of online services in the cloud with Linux, a small piece of software or an OS family depending on your definition.
This is apples vs oranges comparison.