[FuriouslyAdrift]

If you really really care about security, then consider CHERI and CheriBSD

https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/

[fsflover]

Capability approach is just not practical and relies too much on security through correctness, which is unrealistic.