Linux and MacOS/iOS/Unix is another league when it comes to security compared to Windows. Rootkits is impossible. worms are impossible. The malware that is possible is trojans that can be launched from emails and in the browser and cloud applications. But on Linux/MacOS you can detect the attempts, isolate, and they cannot do anything major wrong without you giving them the Admin password. When I say "cannot" the meaning is physical impossible, where "may" is a request for. Should an application try to go to some other place, it is "Address violation" or "Segment Fault" and that was that.