> address space randomization, checking file integrity, checking for developer signing certs, mitigations against hardware side channel attacks like rowhammer or whatever, etc.

OS/Application have been slower way before any of those were a thing.