So, is this thing going to run all the IO emulation in the kernel? That sounds like a horrible architecture security-wise, very much not what I would have expected from OpenBSD, which always seemed to pick security over performance.<p>By far most security bugs in modern hypervisors come from bugs in the emulation of legacy devices, because it&#x27;s complicated and messy. This is why for example Red Hat&#x27;s hypervisor solution has had a lot of work put into isolating the qemu process with SELinux.