@GrapheneOS @dalias > Still feasible to coerce it into working that way by running separate Linux kernels isolated from each other side-by-side.

Basically the QubesOS option. With all the overhead it suggests compared to if it had been designed properly from the start with such isolation & capabilities (LBS would've been helpful there).