By default, Linux has way, way too much functionality, insufficient testing and proof of security correctness, and not enough security controls.