[Spakman]

What do you mean that "The security story is unfinished though."?

[XorNot]

It's openly pointed out in the docs that it's intended to prevent unintentional system alterations, not stop an actively hostile program - i.e. there's not a lot of confidence from the devs in it's isolation levels yet.