Secureboot style integrity systems that only boot into envs with ubiquitous signature validation and have lots of hardware protections to maintain that in the face of other bugs.