Defense in Depth

Defense in depth is a methodology whereby you layer various security approaches, such that if any one layer is compromised the system as a whole is still secure.

In the Qubes model this means ensuring that you have a strong chain of security, from the application (browser, etc.) through to the kernel, through to the hypervisor.