desktop operating systems need better isolation

current status:

running unprivileged binary can steal all user data and install keylogger

this is not an issue with android style app isolation