[pjmlp]

> Your current (desktop) operating system allows these binaries to run with your full user privileges.

Actually it can sandbox them already.

[aboodman]

But doesn't, by default. And that's crucial. On the web I can just run any random program from anyone and there's a very strict limit on what it can do to me and to other software.