It's probably impossible to achieve security through correctness, but security through compartmentalization can work. See: https://qubes-os.org.