 Minimality requires that a system's trusted computing base (TCB) should be kept minimal.As the kernel (the code that executes in the privileged mode of the hardware) has unvetted access to any data and can thus violate its integrity or confidentiality, the kernel is always part of the TCB.Minimizing it is natural in a security-driven design.