More secure defaults for things we use as daily drivers.
There are far too many things that a n00b user takes for granted while using a Linux distro like Ubuntu which require manual configuration on Qubes.
It seems a lot of configuration depends on dom0 whose terminal we can’t easily copy to and the configurations are usually quite elaborate (see the policy file for setting up an audio qube as an example.
It would be nice if dom0 was split into two terminals. A “true” root terminal that retains the security of not being able to be pasted into and another terminal that has enough privileges for writing up configs so that it is less difficult to troubleshoot and experiment.
Right now I would like to be more secure but choosing security comes across as being hard and a user can’t easily undo their choices if they make mistakes. Leading to a situation where the average user will prefer to stick with the defaults and the defaults if not that secure, in and of themselves increase the security risk of the user.