The reason I cite browsers here is that browsers are very hard to get right (content-controlled full-featured programming languages along with renderers for every mainstream file type). I think they serve as a pretty good illustration of why the high-assurance software approach fails for consumer computing.<p>I&#x27;ll take high-assurance consumer software seriously when it produces a browser that is competitive with IE on Twitter, Facebook, and Google Mail.<p>I don&#x27;t think solutions that involve KVM switches are meaningful in the real world. Journalists aren&#x27;t going to KVM switch from their browser to their word processor. I&#x27;m not interested in litigating this point; I am un-convinceable on it. I&#x27;m not much more receptive to systems that devolve to the software equivalent of KVM switches.