We are talking about different things. I was talking about my own reasons for not wanting snap on my desktop. You are talking about the need for better securi

We are talking about different things. I was talking about my own reasons for not wanting snap on my desktop. You are talking about the need for better security on operating systems in general. Security is never an absolute, it's always a trade off between many different factors, such as usability, protection, and cost. You have to take a risk based approach. People who work in security have to do this on a daily basis. For myself, the sand-boxing trade off is not worth it on my own desktop. Everything I have tried has significantly interfered with being able to do what I need to. If we were talking about what was needed on a critical, internet-exposed system, my answer might be different. On the subject of what a good secure OS would look like, I studied capabilities extensively when I did my MSc in Info Sec. The E language and the EROS operating system were absolutely fascinating. Getting rid of ambient authority would be awesome. I have worked with people who worked on CHERI, which is also a really promising approach to use capabilities for better memory protection - and has the advantage that it can work with code not written for it. When something like that is available, I'll be one of the first people trying it out!