With GTA VI leaks popping up from the likes of Cyberleek the entire week prior, it's not surprising to see claims of a leaked playable build of GTA VI pop up online. One such supposed build claiming to be the very same playable GTA VI build being used by Cyberleek for their leaks popped up...
Do you not know what loading a recovery snap shot does? It doesn’t matter if it escapes. Whatever was new is removed since it’s restoring your harddrive to a previous state. It’s like a backup harddrive, without being external.
There’s ways for the malware to disable recovery mode, but I would assume the same could happen to Linux as well.