seL4 + linux kernel api shims does seem like the most realistic approach to move forward. But the driver + driver API situation seems like the biggest barrier.