Many unix systems are used by just one person (Desktops, Smartphones, Tablets). Most unix systems that are used by more people are servers and don&#x27;t use the unix user system to discern between users.<p>The fewest unix systems out there have several users connecting to it with each user having a different unix user account. But exactly this is what the unix user system was designed - nothing else. Everything else like root or users for services is just a dirty hack, because unix wasn&#x27;t designed to offer real isolation of applications.<p>AppArmor doesn&#x27;t work because users creating profiles about what syscalls are allowed is out of touch with reality.<p>The only unix systems partially offering the isolation actually needed today are Android and iOS. You could still improve them massively though.