Access tokens are a &#x27;manageable&#x27; risk and AWS provides tools to enforce best practices where necessary.<p>Locating and regularly patching security vulnerabilities across thousands of components in a fully-featured monolithic operating system isn&#x27;t. It&#x27;s a potential disaster waiting to happen.<p>You don&#x27;t need...<p>...a huge bundle of drivers when the OS will always run on a VM.<p>...extensive filesystem support when everything will be either transient or run directly from memory.<p>...multiple users when only one is required.<p>...OS-level sandboxing (ie kernel&#x2F;user-space) when the VM already provides sandboxing.<p>...native POSIX tools when &#x27;safe&#x27; alternatives can be run from the VM.<p>Despite the best intentions of developers and admins alike, the current approach to security is not working. Despite my own vigilance, I have personally had my sensitive information leaked by two separate multi-billion dollar organizations in the past year.<p>It&#x27;s a simple fact that every feature added, increases the attack surface of the entire system. All I&#x27;m suggesting, is that it&#x27;s not a bad idea to start looking to the alternatives that are becoming available.