Niner since 2015
Until now, I have thought of compartmentalization only as a privacy related measure, so this interview was quite inspiring.
However this raises a question: Is there a recommended practice for handling single sign on services (like Microsoft Account, etc.) that push you to only use one account?
PS: I think you forgot to link https://twofactorauth.org/
If processes from different subsystems can't see each other, how can the desktop window manager (as far as I know a Win32 application) see linux processes and render their windows to the desktop?
Am I crazy or are there pink garden gnomes in the video? (for example at 2:40)