I am not surprised. We've known for a while old OS design can't fix this. Not in a comprehensive way. We can patch over specific cases but the basic design is w

I am not surprised. We've known for a while old OS design can't fix this. Not in a comprehensive way. We can patch over specific cases but the basic design is wrong. Capability-based OSes like mobile ones tend to work better here. We can't keep assuming code run on-device is trustworthy. Not just in the "not malware" sense. In that of "does what the user wants and nothing more, nothing less."