Immutable as in filesystem.<p>Meaning every restart brings the system back to a fresh state. Most trojans&#x2F;backdoors persist because they&#x27;re able to modify the underlying OS to load them on boot. No, immutable OSes are -- by no means -- a new idea. This just uses the approach by default.<p>Not talking about the kernel specifically. Although there&#x27;s no reason the bootup time should be slowed down by loading unnecessary HAL, drivers, protocols, utilities that will never be used in a server setup. GBs of modules was referring to the rest of the OS made up mostly of features that will never be used by the server.<p>Crypto support is one big issue. I&#x27;d assume if the OS uses V8 at the base level, it should be able to be packaged with OpenSSL.<p>Auditing for what exactly? File access? The filesystem is immutable. Network requests? Can ve handles at the network level or a tool can be added to log network requests via an offline logging service.<p>Security auditing at the OS level isn&#x27;t required to the same degree it is on other OSes because the attack surface is so small. For instance, you don&#x27;t have to check for SSH vulnerabilities when there&#x27;s no SSH. The userspace sandbox isn&#x27;t necessary because everything that&#x27;s network-facing already has to run through V8&#x27;s sandbox.<p>Application-level vulnerabilities will always be an issue but that&#x27;s nothing new. This doesn&#x27;t solve all problems. Just reduces the potential for issues.