That does very little for security, if it's not a net negative at all. Most attacks aim at executing arbitrary code in the process space of the application bei

That does very little for security, if it's not a net negative at all. Most attacks aim at executing arbitrary code in the process space of the application being targeted. The lack of user-land does not help.