> I also wonder whether there's anything stopping _Linux_ slowly becoming something more like this over time by supporting kernel modules that have direct but _

> I also wonder whether there's anything stopping _Linux_ slowly becoming something more like this over time by supporting kernel modules that have direct but _limited_ access to talk to each other in more ways that can be verified at load time. You are more or less describing eBPF and the evolution you are wondering about has indeed started slowly happening for some years now. It does however use special bytecode but getting compiler support is not such a hard problem compared to building the safe VM.