Strongly-typed languages; sandboxes and containers; single configuration system; no arbitrary filesystem access .... sounds like you're describing Android?