This is a good application for seL4. As has been pointed out, the machine running this probably does nothing else. So you don't need 99% of Linux.

The less irrelevant code you have around in a security box, the better. The attack surface shrinks.