Secure lock down is not possible with hypervisor that allows you to run any OS. The idea would be to only run what Apple allows - a tailored Linux distro - and

Secure lock down is not possible with hypervisor that allows you to run any OS. The idea would be to only run what Apple allows - a tailored Linux distro - and only on the coprocessor which is isolated from the fully locked down main OS. Oh and by the way "perfectly good" is way too generous for the hypervisor macOS ships with, unless there have been recent drastic improvements..