I think “can be” rather than necessarily “are”, but yes; delegation like this enables more robust separation of concerns, in addition to explicit time / space s

I think “can be” rather than necessarily “are”, but yes; delegation like this enables more robust separation of concerns, in addition to explicit time / space separation. “Can be” because you have to be intentional about it. As the author implies, it’s easy to build multiple insecure computers, and when you call it “firmware” and hire people with “firmware” experience, this tends to negatively correlate with the security mindset…