Nice one Nick. Flask is really a beautiful architecture. The primary SELinux author once said, "SELinux doesn't add complexity. It exposes complexity that was already there." MAC policies for general purpose computing environments trended toward unmanageable complexity, but the fit is much more natural in constrained computing environments such as smartphones.