They might have bundled them together, but the layer around the secure part is just another system - it doesn't make anything more secure. All it's functions could have been taken up by the main system.

The only possible security win is by making BridgeOS simpler and less likely to have vulnerabilities.