Unfortunately it doesn’t seem like it. Between 2003 and 2013 he really used to believe that pedophilia doesn’t harm children. But he really only mentioned it a few times and hadn’t talked about it again until 2019 when it was brought up again. He said then that he had changed his mind since and that he was wrong (https://en.wikipedia.org/wiki/Richard_Stallman#Controversies).

I don’t think we should cancel people for believing something stupid 10 years ago, but his haters love to use this. Just like they like to misquote him or spread fake rumors about him (https://stallmansupport.org). They are probably too angry to think clearly or verify information, but sometimes I wonder if for some of them it’s really only about his position on proprietary software (he wants to destroy it) and that’s why they wanted him removed from the FSF.

Software is usually installed from repositories and not random websites, so there is less room for user error in general. Even if you download an executable file, you will most likely have to give it permissions to run first. So I think it’s more immune to viruses not because of its users, but because of the way it’s designed.

it’s a smaller target and that hackers aren’t spending as much time trying to attack it

It’s the most popular server system, so I’m not so sure about that.