#securityis

“When a vfat thumbdrive which contains `` or $() in its volume label is plugged and mounted trough the device notifier, it's interpreted as a shell command, leaving a possibility of arbitrary commands execution. an example of offending volume label is "$(touch b)" which will create a file called b in the home folder. “

It’s relatively trivial to protect yourself from 99.9% of security threats.  That last 0.1% ranges from “basically impossible” to “literally impossible”.