@dalias @jplebreton Though given how there are a few exploitable kernel bugs in the network stack every few years, it can be a good idea to apply OS updates periodically.

This wouldn't be an issue with either high-isolation kernels or microkernels, of course, but we can't have nice things.