Wouldn't both of these be neutralised somewhat if you took a rump-kernel approach of some sort? Use a real kernel network stack, just run it in user-space with

Wouldn't both of these be neutralised somewhat if you took a rump-kernel approach of some sort? Use a real kernel network stack, just run it in user-space with whatever parts you don't need ripped out?