That exact problem was why security kernels and later separation kernels were invented. The theory was you could bulletproof 4-12Kloc of mostly static code more

That exact problem was why security kernels and later separation kernels were invented. The theory was you could bulletproof 4-12Kloc of mostly static code more easily than monolithic, dynamic hypervisors. They have less nifty features, though. Really bare bones.