The problem with this is it encourages increased fragmentation of systems just to address a single class of security bug. This could actually increase the numbe

The problem with this is it encourages increased fragmentation of systems just to address a single class of security bug. This could actually increase the number of bugs, and thus security bugs. > For example, if you are working entirely in the kernel, all your code runs at the same level of privilege so you can’t use that as a filter. Unless you use a microkernel.