Debian in its GUI (at least KDE, which I'm using at the moment) demanding the root password to install the updates it's blinking at me about in the tray all the time. In this context, demanding a password at all is rather silly (Windows doesn't require your password to install updates in a single user environment, and it doesn't even pop up a UAC prompt) and this is going to be yet another one of those things that prior Windows users will moan about, declaring that "Linux is complicated and hard" and drive them back to the comfort of the devil they know when they feel like their own computer is actively trying to stymie them at seemingly every turn.

My user account is a sudoer so there is absolutely no technical reason my own password shouldn't work. And, in fact, if I run updates via apt in a terminal it does. But allowing updates to install from the desktop environment, something ostensibly ought to be a routine userspace kind of operation, requires everyone using the system who might want to do this to know the system-wide root password. This is a monumentally stupid idea.

I am well aware there are myriad ways around this but they all involve hand-editing config files and come with stern warnings about "this may break your system so proceed 'carefully,'" as if anyone who is not already an experienced Linux nerd will know just what the hell "proceeding carefully" is supposed to look like.

The inevitable XKCD comic succinctly sums this up:

The UNIX permissions and administration model may have made great sense on glass teletypes in the '70s and when nobody knew any better, but it's certainly long outmoded now. It's going to make a lot of people very angry to read this, but that's actually one of the few things that Windows does much better, at least starting from NT onwards.