I don't understand, unless I'm misreading this OS has no memory protection. In other words: it can't run applications! And this is not fixable! You can never risk executing untrusted or semi-untrusted code with permissions on something like this.

I've always thought that it would be quite simple to pull "an android" but based on wasm (even perhaps using wasm-in-kernel execution). Quite simple, that is, compared to what Android achieved with Java. But this, this just can't work.