Alternatively, if it has to support multiple, mutually suspicious trust domains concurrently,the secure world OS will have to become much more complex and thus more error prone and vulnerable.
Another issue with Trust zone is that requests and parameters passed to it from the normal world cannot be trusted.