SELinux works well on Android because the OS is delivered by a single entity and unmodifiable, and is maybe fine on a desktop, but on a custom server it seems t

SELinux works well on Android because the OS is delivered by a single entity and unmodifiable, and is maybe fine on a desktop, but on a custom server it seems to me that using VMs or containers as a security boundary is far better since it's trivial to understand and in the case of VMs more secure.