[jacob019]

well obviously we won't win the performance battle, and it may be impossible to protect the database and user data, but sandboxed execution with a virtual filesystem could protect the overall system, keep it from joining botnets and sending spam, etc.

[nkozyra]

Ok, but think about how many other ways you could fix that by wrapping battle tested interpreters.