I feel like this is missing a big point of the article.
The vulnerability that the xz backdoor attempt revealed was the developers. The elephant in the room is that for someone capable of writing and maintaining a program so important to modern technical infrastructure, we're making sure to hang them out to dry. When they burn out because their 'hobby' becomes too emotionally draining (either because of a campaign to wear them down intentionally or fully naturally) someone will be waiting to take control. Who can you trust? Here, we see someone attempted (and nearly succeeded) a multi-year effort to establish themselves as a trusted member of the development community who was faking it all along. With the advent of LLMs, it's going to be even harder to tell if someone is trustworthy, or just a long-running LLM deception campaign.
Maybe, we should treat the people we rely on for these tools a little better for how much they contribute to modern tech infrastructure?
And I'll point out that's less aimed at the individuals who use tech, and more at the multi-billion-dollar multi-national tech companies that make money hand over fist using the work others donate.
That's not a problem at all, so long as the first boot device is the Linux drive.
GRUB has no issue chain-loading the windows bootloader. You can even set GRUB to default to Windows if you want, it'll just show the menu for a while (whatever you set the timeout to be, I find 3 seconds to be plenty) and if nothing is selected, it will hand off to Windows.
If you want to boot Linux, just hit the down arrow key when you see the menu to stop the countdown and choose what you want to boot, then hit enter.