@coolboymew @olmitch capability based security, pretty much the end all be all of security-oriented software design. it gives you the ability to finely segregate everything about your system in such a way that jailbreaking can be made formally impossible and whole categories of common breaches simply don't work