An Erlang actor like model where a program’s sub components call each other by message passing with each having its own security context may work. However, the

An Erlang actor like model where a program’s sub components call each other by message passing with each having its own security context may work. However, there are multiple security contexts at play in an operating system; with regards to the XZ backdoor it’s mostly about capability based security at the module level, but you also have capabilities at the program level, and isolation at the memory level (paging), isolation at the micro architectural level, and so on. Ensuring all of these elements work together while still delivering performance seems to be rather challenging, and it’s definitely not possible for the Unix-likes to make a move to such a model because of the replacement of the concept of processes.