Comment by snvzz

The problem is ambient security, UNIX's security model.

Systems with capability-based security, such as seL4[0], do not suffer from this category of problem.

0. https://sel4.systems/About/