> All OSes in prod today need to be rebuilt from the ground up to be secure for the next century
Qubes OS solves this with hardware virtualization, which is really fast and secure.
Qubes is nigh impossible for normal users, even if setup for them. They need extension training and discipline.
Compartmentalization is only a part of the solution. Once you have that finished, you still need to deal with the actual vulnerabilities in guests, which will contain your secrets and be exposed to the internet, one way or another.