So a 0day goes through this reactive-only security product, promptly reconfigures the device to bypass Cloudflare, ???, profit/DDoS. One way to secure IoT fro

So a 0day goes through this reactive-only security product, promptly reconfigures the device to bypass Cloudflare, ???, profit/DDoS. One way to secure IoT from DDoS etc is that is relatively painless for manufactures and more importantly actually effective, would be to adopt the best of what already works on mobile: Hypervisor/Microkernel that offers network driver that can enforce any network rules for user-supplied payload that does everything else. Basically have a trusted base that can handle security & brick-safe updates. See: https://en.wikipedia.org/wiki/Open_Kernel_Labs https://en.wikipedia.org/wiki/Open_Kernel_Labs (no affiliation)