Interesting implementation tidbit from a Federighi interview: >From a security architecture point of view, we did not want to have file system drivers running

Interesting implementation tidbit from a Federighi interview: >From a security architecture point of view, we did not want to have file system drivers running in the kernel communicating with external media that could have been tampered with. Getting all of our file systems to be isolated from the kernel, it was real hardcore engineering efforts.