So a better security model would not "lock" or "wall away" anything. Instead, it would scan constantly for evil processes inside the machine. It would hunt for bad acts inside the system, in the way that the bloodstream fights germs.