The exploiting process wouldn't have access to /dev/net/tun if SELinux was configured properly... So it technically would extinguish itself there and then. It

The exploiting process wouldn't have access to /dev/net/tun if SELinux was configured properly... So it technically would extinguish itself there and then. It works on the principle of least privilege so you start with nothing and add what the process needs.