Nested virt with AVF can balance the competing goals of security, usability, freedom, individuals, and corporate supply chains. It can reduce the size and attac

Nested virt with AVF can balance the competing goals of security, usability, freedom, individuals, and corporate supply chains. It can reduce the size and attack surface of the most-privileged code which runs in a system. Nested virt has been available on x86 for a decade (KVM, Bromium vSentry / HP SureClick, Microsoft Defender App Guard), on Apple Silicon since M2, MacOS since M3 and iPadOS since M4 (Secure eXclave VM). On mobile, it can sidestep some business model conflicts which torpedoed Nokia, RIM, Maemo, Meego, Tizen, etc. "Virtual Machine as a core Android Primitive" (2023), 160 comments, https://news.ycombinator.com/item?id=38538100 https://news.ycombinator.com/item?id=38538100