In my opinion, the lesson is that microkernels are too small (e.g. lacking per-user/group security schemes), and monolithic kernels are too big.