dom0 is the administration qube which handles the graphical desktop, i/o and hardware devices. So if you’re installing dodgy software in dom0 you go around a lot of the sandboxing that qubes offers.