Originally Posted by meynaf
This malicious code can do anything... just like if there were memory protection.
This is the part that i really don't understand.
If there is memory protection, malicious code cannot do anything. That is the point of memory protection. You can't just read, write or execute anywhere. You can't directly access hardware resources. There might, in principle, be other holes in the OS security model that let things through... but ideally there would not be, which is what we would strive towards.
Otherwise, if malicious code can do anything, then so can your own code, in which case what are you complaining about?