[Soft]

The problem with seccomp is that it operates at the level of system calls. An application could use seccomp to, for example, restrict what system calls it can invoke. However libraries usually consider what system calls they use an implementation detail that can be changed at any time. This forces the application programmer to pay attention to library internals.

[staticassertion]

An effect system would solve this problem, as new system calls imply new effects, causing a breaking API change.