This is actually completely contrary to documented best practices. Best practices involve a lot of layers and processes. Defense-in-depth is best practice. My

This is actually completely contrary to documented best practices. Best practices involve a lot of layers and processes. Defense-in-depth is best practice. My experience is that only helps if each layer is carefully designed and analyzed at a level impractical for most real-world systems. In most cases, unless you're designing Unix from the ground up, the better approach is KISS.