Independent isolated copies of software allows user to safely run apps with more limited privileges, compared to classic approaches. Removable devices are not touched until explicit user permission granted.
Rolling release model ensures that core files are kept untouched and are impossible to infect.