[inopinatus]

Has the MAC framework reached sufficient maturity that root need no longer be especially privileged, but instead just-privileged-enough?

(this would attenuate many of the OP's complaints)