> My question is what kind of Operating System Design should be employed to make it as difficult as possible for companies like NSO to find useful exploits in s

> My question is what kind of Operating System Design should be employed to make it as difficult as possible for companies like NSO to find useful exploits in smartphone/computers? It would piss them off if the malware 'thought' it got root, but it didn't. This would be a decoy environment full of plausible looking (non-sensitive) information, and the malware reports to the C2 with a bunch of benign data. How to achieve this is the killer question though.