This is a fundamental flaw of nearly every OS, because users need to be able to run software on their computers.

That doesn't mean we should just ignore security elsewhere. Many users know not to trust mysterious executables from the internet, but don't expect a PDF or font file to be able to infect their machine.

I think being able to trust that non-executable files like these won't compromise your system could be a big deal.