Comment by chickensong

You can observe attempted behavior while also enforcing rules.

> adversaries have never existed inside of the systems that we hoped to secure in the first place

Yes, that's why all users are root. We built MACs like SELinux just for funsies.

> nobody has actually solved this problem adequately yet

L7 DPI firewall policy.