The linux programs you run expect access to everything, which is the source of the problem. It's like expecting to be able to draw a megawatt from an outlet in

The linux programs you run expect access to everything, which is the source of the problem. It's like expecting to be able to draw a megawatt from an outlet in your house. A capabilities based system could emulate that, and then only let the program access files you allow it any time you use the system's "powerbox" which replaces the open/close file dialogs. From the users, and the programmers, perspective, it works the same. But if the program has a bug, or virus, or anything else, it won't get access to anything except what you allowed. We can have easy to use, actually secure, computing for everyone.