On: Privilege drop, separation, and restricted-service operating mode in OpenBSD

[PrimeMcFly]

On most servers, programs are not doing drastically new things. That really isn't the issue you make it out to be.

The developer applying restrictions ahead of time can't, by nature, mitigate the types of bugs that things like SELinux can protect against.

You really have no clue about what you're talking about.