Even a micro-kernel won't help. Even there, you have a few "keys to the kingdom", such as compromising the HD driver (If I can write what I want, I can modify the micro-kernel how I want).