the compartmentalization serves to allow for and further reinforce privilege separation
CWE-311 : Missing
Encryption of Sensitive Data
Key Practices for Mitigating the Most Egregious Exploitable Software Weaknesses 17