The Unix security model is mostly useless today, but it seems like something better is possible as an incremental change, and there are projects that do that, like RSBAC.
Aside of that, plan9 wins on the theoretical side, it was a research OS, but in the practical one... it's opinionated.