The base media for ButtonOS is read-only. This provides Physical protection from undesirable modification.
ButtonOS has built-in to the base a firewall that prevents incoming connections.
The system is composed of components that are constantly being monitored by security experts the world over.
Any security flaws uncovered are distributed by a world wide network of digitally signed packages.