Comment by jeffbee

There are microkernel operating systems out there that run the network stack in isolated, unprivileged contexts. Some of them are even not written in C.