A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.
Officially, we don't know what France's forthcoming Linux desktop will look like, but this is what my sources and experience ...