Separation kernels aren't, MLS likely works best with kernel cooperation (given Linux's large surface) and same with capabilities at least. My point wasn't the

Separation kernels aren't, MLS likely works best with kernel cooperation (given Linux's large surface) and same with capabilities at least. My point wasn't the specific proactive mitigations, but rather Linus' attitudes creating negative perceptions.