Security only works properly when applied to all layers.
It is very educative to read about security models on Multitics, ClearPath, System 360/370, OS/400 among many other similar systems, their attack vectors, and what we ended up getting by having winner takes it all with UNIX based systems.
This year we celebrated 30 years of Morris worm.