My main way of helping right now is to keep pushing awareness of capability based security. If people don't know something is possible, they don't reach for it as a solution to problems.

Genode seems to be the closest to general use, followed closely by Google's Fuchsia.