I suppose that an OS running transparently on an actual cluster of many independent cores, not linked even by a common L2 cache, could allow to separate security domains much more reliably.

Single-thread performance would suffer, though, unless you're ready to pay quite a lot. And it's still hugely important in many cases.