Post #3024014

@hailey@hails.org yeah this was my response to "please add [hardening]" to git-pages getting hardening inside an app is _hard_ and things like seccomp/pledge barely do anything for a web application anyway, the trust boundaries are squishy and between requests systemd already does most of what you'd be able to get with pledge or landlock in best case. and go-landlock is cursed (check it out)