You are correct and most of the commenters here are wrong, UAC is a feature that IS secure without a password and Linux does not have any equivalent.
Windows can safely control privilege escalation through a secure elevated prompt that only the user can interact with.
Because Linux doesn’t have any kind of secure elevated prompt like that, any process could impersonate you to log in as your user if it didn’t have a password, so you just have to have a password on Linux if you want it to be secure.
You are correct and most of the commenters here are wrong, UAC is a feature that IS secure without a password and Linux does not have any equivalent.
Windows can safely control privilege escalation through a secure elevated prompt that only the user can interact with.
Because Linux doesn’t have any kind of secure elevated prompt like that, any process could impersonate you to log in as your user if it didn’t have a password, so you just have to have a password on Linux if you want it to be secure.