Ideally there would be a usable security first os based on something like sel4 with a declarative package system for slow to change mission critical appliances.