Yeah, its almost like "do one thing and do it well" had security benefits... SElinux has the desired sort of granular permissions at the OS level, but if every

Yeah, its almost like "do one thing and do it well" had security benefits... SElinux has the desired sort of granular permissions at the OS level, but if everything is dynamically linked to everything else that doesn't help as the tiniest lib is now part of every process and can hence pick and choose permissions. But even if we go full monolith OS when systemd takes over the job of the kernel and the browser, that just changes where we need those permissions implemented. We can't practice zero trust when there is no mechanism for distrust in the system.