I think what you actually want is static linking, with an OS that supports kernel ABIs going back many years (like FreeBSD) and good process/user-level restrict

I think what you actually want is static linking, with an OS that supports kernel ABIs going back many years (like FreeBSD) and good process/user-level restrictions. Running an entire operating system for every application is a bit heavyweight.