If some crappy javascript library leaks customers secrets for an online shop, where exactly is the OS kernel at fault?
If the CEO's secretary gets convinced to wire $1M to an oversees account because somebody made them believe it's the boss requesting it, then how would a verified microkernel have helped?
> The Linux CVE database was recently analyzed and it was determined that 96% of the vulnerabilities would be mitigated to at least non-critical status, if not completely eliminated, if linux were a microkernel architecture.
In a fair comparison you need to consider the CVEs that a microkernel would suffer which had been eliminated with a monolithical kernel.
Oh but it's verified, you say? Then the fair comparison is a verified monokernel vs a verified microkernel.
Apples and oranges.