Well if the OS is rendered read-only at the hardware level then malware can't take up residence.
Reply on news.ycombinator.com