I'd prefer regular Debian packaging plus containerisation via systemd-nspawn or just the various systemd security features that use the same Linux namespacing features as Docker.
That is a pretty serious bug in whatever email program allows tracking images to work in email. Seems unlikely anyone would use such an email program. Which email program are you talking about?
Its because they know that people can use FM for just about anything, and hooking an amateur FM Packet radio up isn't difficult, and you can have free ONE way transmissions.
Some use FM only, and have Packet Radios built into the phones.
Linux isn't necessarily immune to USB malware. There are a lot of drivers for USB devices in Linux and any of them could have a bug. For example people only recently started doing fuzzing on filesystem drivers.