>There’s a third alternative: keep the platform powerful but increase the default isolation level for third-party software and let the user choose what permissi

>There’s a third alternative: keep the platform powerful but increase the default isolation level for third-party software and let the user choose what permissions it has. That's the direction Windows is going as well with the MS-Store and appx/msix bundles. There's also Process Memory protection by using virtualization https://support.microsoft.com/en-us/windows/core-isolation-e30ed737-17d8-42f3-a2a9-87521df09b78 https://support.microsoft.com/en-us/windows/core-isolation-e...