are you asking what is safer about, eg, selinux vs regular linux? I think that is pretty self-evident that a constrained user experience results in a reduced a

are you asking what is safer about, eg, selinux vs regular linux? I think that is pretty self-evident that a constrained user experience results in a reduced attack surface. these questions are silly if you pivot them to be about other things rather than the fruit company, just like the arguments that "[company] needs to run open-infrastructure so other companies can build commercial products on [company] servers". It's rather obvious they're being asked in bad faith with the intention of dragging down the discussion. You know perfectly well what SELinux and application sandboxing are for, and that they're net benefits.