Seperation kernels don't help, because all the radio and Qualcomm spyware is in the baseband chip already, which is completely sealed off. Only avaliable from the CPU through a serial line.
They help to eliminate lots of vulnerable code from the TCB. If that’s what attackers are hitting, then it will definitely help. If hitting the other stuff, it won’t help. How valuable it is depends on how often each is targeted.
Kernel up used to be the most, targeted layers. I’ve been out of the field a few years. I don’t know how many black hats use 0-days on basebands in practice.
