Plasma widgets are a gaping security hole.

Aka “thing that isn’t sandboxed, never has been sandboxed, and never has been claimed to be sandboxed, is in fact not sandboxed”. Just like any app from your distro repositories, or appimages, or games in Steam… Or even most Flatpaks by default for that matter.

Widgets being sandboxed would be cool and is a long term goal (which is way easier said than done!), but don’t present them not being sandboxed as some irresponsible thing someone does because they don’t care. Your expectations of security simply are simply completely misplaced.

What do you mean? Screen savers have been possible for many, many years…

Suspend works just fine with Fedora KDE on my AMD Framework 13. I don’t know about hibernation, since I use FDE and Linux still doesn’t support encrypted hibernation.

All the distros use fprintd, but that’s not related to Framework aside from the laptop using a sensor that fprintd supports.

There’s no icc profile for it, it’s just read from the EDID