Secure code inside the kernel is untenable.

We can do ok, lots of hard work goes in to doing ok, but this isn't the kernels top priority, and never will be.

Userspace is the security boundary.