Omarchy is full of security holes

Omarchy 4.0 contains numerous serious security vulnerabilities, including bash injection flaws and the ability for notifications to execute arbitrary code, stemming from the use of unreviewed AI-generated bash scripts to process untrusted input. The project's leadership prioritizes marketing and polish over genuine security practices, creating a disconnect between public perception and actual risk. The author warns users against adopting Omarchy if security matters to them, arguing the team lacks commitment to addressing fundamental security issues.