A better investment would be to fix the holes in the first place.
Or, better yet, spend that money to educate users and administrators alike on how to protect themselves.
Or, better yet, spend that money to educate users and administrators alike on how to protect themselves.
To suggest that further work on the processor security model is a waste because people ought to have done it right the first time is blind to the fact that people will screw up no matter what.