Android (well, the Pixel anyway) does a great job of isolating processes by using SELinux and seccomp. You can have processes running as root that are still com

Android (well, the Pixel anyway) does a great job of isolating processes by using SELinux and seccomp. You can have processes running as root that are still completely isolated away from most of the system.