Anything that can be userspace should be userspace

It's problematic to do 100% robustly without having true microkernel infrastructure.

In particular, it's impossible to tell if the wrapper process crashed or if it was the target executable. And there's no reliable way to distinguish between stuck processes and just very slow processes.