> If I could get a micro kernel with a better security profile than Linux, that doesn’t sound so bad.

I suggest that you look at genode/sculpt:)