Maybe am ignorant but at least I understand the questions before I answer them.
hottari
You would need the power of root to do all these aforementioned things (run a VPN service).
And am not saying that Linux is immune to malware, just that it's not out of the norm to have package managers install services crucial for operation during installation. Since Windows doesn't have package managers, I'm gonna replace package managers with packages in this reasoning.
This is actually very close (just tested and confirmed it). I somehow stand corrected about requiring manual enablement but this is just using the package manager to do the dirty work for you.
However the program itself cannot write into those directories without root permissions. You still have to allow your package manager to do this with root permissions as mentioned.
Read my argument again.
Bruh you just ran the command to enable the 'written' service. Comprehension is a problem in this community.
You failed. This requires the user to run a script aka manual intervention.
Piped uses less CPU on client playback and features like dash actually work as opposed to invidious. But I'm glad creating a piped instance on docker is complicated because I like the simplicity of invidious' UI.
Another reason to use VPN/Tor.
Installing a package requires root which will automatically give the package manager permission to write anywhere on the system. To create a systemd service in user that will automatically start at boot requires root, someguy here commented with the how.
However you can run any installed binary via Desktop files as a user (no root) on login by writing to
~/.config/autostart
.