Linux in-general is a small portion of the Darwin architecture. One is a monolithic kernel, the other has microkernel IPC security to consider.

Are there any glaring limitations in Bubblewrap you'd like to point out, or are we having the Tannenbaum argument all over again?