Another way to state this is: accept the state of the world and approach the problem using an existing methodology - treat code as untrusted and whitelist execu

Another way to state this is: accept the state of the world and approach the problem using an existing methodology - treat code as untrusted and whitelist execution paths. SElinux and others do this, intrinsic is another product that uses the same approach for app runtime, I think this is probably the future of this problem space. This is zero trust, and this pattern is showing up everywhere (again?).