So you refuse to learn from the history, because that's basically the UNIX model. That you string together simple text processing programs and any misbehaving p

So you refuse to learn from the history, because that's basically the UNIX model. That you string together simple text processing programs and any misbehaving program gets sigsegv without endangering anything, you don't have to worry. But it transpired that: 1. splitting functionality in such way is not always possible or effective/performant, not to mention operators in practice tend to find fine grained access control super annoying 2. and more importantly, even if the architecture is working, hostile garbage in your pipeline WILL cause problems with the rest of your app.