I know we all like to hate on canonical for literally any reason, but this happens with every single software repository that is not a closed garden and some that aren’t.

And yeah, it’s sandboxed, so the damage is far, far less than it could be.

Sandboxing does nothing for social-engineering attacks, which is what many of the malicious snaps were designed for.

And the thing that makes the Snap Store uniquely bad is that there’s no human review. Anyone can throw up a malicious snap, and there are very good odds that it’ll get served there. Even the Flathub, a community-run project, has human reviews before new apps get published. Canonical, despite having money and resources that community projects don’t, can’t seem to be bothered to take basic steps to protect their users.