Specially worthwhile to read is how Multics security model compares to UNIX.

https://multicians.org/b2.html

And how much safer PL/I was, even when compared against C17.

Also see https://ban.ai/ and https://ban.ai/Multics/doc/