I absolutely agree that the feature set needs to be limited, and that's
what makes the Plan9 way of union mounts so beautiful (thanks for
describing it here, I didn't know how it works before).
Limiting the implementation so that you can never change the underlying
file system any more may be worth it but is still quite drastic, so I
thought it should be mentioned more explicitly.