Seatbelt mainly constrains the routine system calls of user-space processes, and its protection against kernel vulnerabilities or certain low-level primitives is limited.