Two Security Areas: 1. Kernel 2.Userland The move to remove one ring level in intel chips was touted as to decrease complexity of the CPU chip and OS start tim

Two Security Areas: 1. Kernel 2.Userland The move to remove one ring level in intel chips was touted as to decrease complexity of the CPU chip and OS start times. That is not the only reason, there is a security reason as well. Security is about making it hard on all surfaces to attack if feasible. If an OS hardens kernel to attack, then the attack moves to userland. See how virus and other attacks on BSD kernels work. So the correct question is in the systems realm, can we come together to hardened both the Kernel and Userland equally?