Most of the Windows malware gets deployed by some user downloading and executing random files they downloaded on the web. Since installing applications on Linux is usually done through some centralized package manager or app store (Flathub), it almost entirely eliminates this attack vector. Running random scripts from the internet by downloading them using curl and piping them into sudo bash is a whole nother issue though. Noob-friendly distros like Ubuntu should IMO have some safeguards in place to block these actions.