I know Qubes. I meant "requiring root to, e.g., install & configure applications is a huge antipattern" on standard Linux distributions, where most people just use sudo in their usual shell, so an attacker merely needs to take over a non-root user account (and their .bashrc) to get root.

> so an attacker merely needs to take over a non-root user account (and their .bashrc) to get root

So if I don't use sudo then the problem with root is solved?