[citation needed]

> limited sandboxing

seccomp? Namespaces? What exactly do you want Linux to be able to sandbox that it can't?

> no provision for checking binary signatures

Bootloaders already enforce this for the kernel, and the kernel can enforce it for its own modules. Userlands are free to enforce it for userspace programs (e.g., how Android requires APKs to be signed).