In his papers djb is more speaking about minimalism than blacklisting. My interpretation is that one should limit the resources that a process can access only to the needed ones.
His paper shows a develop's perspective and not how a administrator can isolate a process or prevent privilege escalation.