I think you're right, and the solution is security through compartmentalization. See: https://qubes-os.org.