Even better - compile Emacs as a kernel module, and run it in ring 0. ELisp would give it memory safety, so memory protection would not even be necessary. System calls have never been so cheap!