> The title is missing "from a security standpoint". I mean, kind of, but since maintaining system security and integrity is a core function of the OS -- in fa

> The title is missing "from a security standpoint". I mean, kind of, but since maintaining system security and integrity is a core function of the OS -- in fact, it is the primary gatekeeper in terms of all system security -- it means that "being secure" and "being correct" are often synonymous terms for an operating system. After all, if we don't care about security at all we can all run CP/M or run everything as root. Now, sure, you can say that the whole thing is bullshit because verified microkernels are so difficult to design that the end result would be an unusable system, but all that suggests is that when you design your kernel you should aim for a hybrid and compromise more on the side of a microkernel where you can.