Interesting ideas but I wonder if there will be any distribution apart from Red Hat that would really go all the way to implement these ideas. While it seems to solve many security problems, supporting something along these lines seems very aligned with support contracts.