Yeah, one CVE is literally "You can use the MacOS variant of LD_PRELOAD on the client to hook libc calls! Oh no!!" This is a bogus CVE; any application can perform arbitrary actions when its system calls are hooked, but it requires such a strong threat model that the adversary realistically gains no ground by doing so.
("A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the enviroment")
He actually did mention it if you look at the blog post his quote comes from. He's specifically calling for a Linux-ABI-compatible rust kernel that just re-implements things as they were rather than trying to delve into new researchy OS concepts like what Redox does.
Unfortunately, they also have plenty of low-quality venues that dilute the discoverability of the high-quality ones. Some orgs (Usenix for instance) hold to at least a decent standard across nearly all their research conferences, so I can better gauge the quality of a paper in a field I'm less familiar with based on whether it was accepted to a conference in that org. When it comes to IEEE, it seems like they'll let any low-quality journal or conference spring up with their brand as long as it brings in the cash.
("A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the enviroment")