Interesting ideas but I wonder if there will be any distribution apart from Red Hat that would really go all the way to implement these ideas. While it seems to solve many security problems, supporting something along these lines seems very aligned with support contracts.
He says he wants it hackable and secure. I don't think he favors lock-in or throw it away when doesn't work.
The dilemma there seems how do you keep it quickly hackable for yourself but difficult to crack for the bad guys. What are your counterproposals if this is a nightmare?