I was curious about bazzite's vulnerability to that xz cve a few days ago but I pushed it to the back of my mind since I knew an update was going to be pushed if it was affected. Checking deeper relieved me further aha, though I'm sure bazzite users weren't really the main target of the bad actors unless they were trying to build a botnet lmao