Well, "security technology" in the context of mandatory access control frameworks. Bad choice of words. My point is that any ACL framework will require configu

Well, "security technology" in the context of mandatory access control frameworks. Bad choice of words. My point is that any ACL framework will require configuration, be it SELinux, AppArmor, Tomoyo, or pledge. If you want to use pledge to confine applications that don't use the pledge API, it will get complicated, too (admittedly not quite as complicated as SELinux, but still). SELinux writes denials to the audit log and you get plenty of relevant results. pledge is obviously much more sane than SELinux, but someone has to write a policy no matter what technology is used.