Capability Based Security - Our operating systems are based on a security model that is great for the academic and research organizations of the 1970s. It trusts everything except the users.

Capability Based Security inverts this, the user is trusted, and given powerful tools to allow running code without trusting it. Usability and performance aren't sacrificed.