No “user/kernel mode”, yikes, esp when executing third party apps. I guess since all the third party code is executing in a VM, this could be much safer with ve

No “user/kernel mode”, yikes, esp when executing third party apps. I guess since all the third party code is executing in a VM, this could be much safer with verification up front and no dynamic code execution.