In a post-Spectre and post-rowhammer world, I have my doubts that any sub-process security boundary will prove durable in the long run.