The underlying system is managed by OSTree, which handles the entire system instead of individual packages. You cannot simply change any part of the system, it’s all or nothing. This means stability, security, and effortless rollbacks if anything goes wrong. If you really want to tinker, you can create layers that sit on top of the base system, but it still doesn’t modify the system. It’s a very different way of thinking about how the system works. It’s like working with containers.