The entire essay reeks of PR; if they were so security conscious they'd pick SmartOS zones with their full isolation as the basic building block, or even OpenBSD and extended it. Instead, they picked an OS with a very wide attack surface and a history of vulnerabilities. If you were setting about to design a security minded product, would you pick a substrate like Linux or one like OpenBSD?