[DanWaterworth]

I agree with you for the most part here. For the things that I typically use computers for, I would prefer to have both hardware and software protected sandboxes. There's a reason that browsers are switching to using multiple processes.

I suspect you are being downvoted for being overly emphatic. I can certainly think of scenarios where having this extra security is more costly than helpful.

An interesting point of note is that the mill architecture has been designed to have much cheaper hardware protection than other architectures. [1]

[1] https://www.youtube.com/watch?v=5osiYZV8n3U