Two recent kernel LPE bugs, four independent architectural reasons they were non-events, and what that says about design as defense.