GrapheneOS on Nostr: Providing strong isolation for groups of applications is not a solution to everything ...

Providing strong isolation for groups of applications is not a solution to everything and as you said doesn't make them harder to exploit. It also relies on users dividing things up sensibly and not screwing that up by trusting across those boundaries. That's something largely limited to experts and not realistic for most of the people we're trying to protect. It's useful, sure, but it needs to be invisible and seamless for most people to benefit heavily or at all from it.