[sayhello]

And it's nice that the web app only has a narrow set of permissions.

You could imagine the same for an unzipping app. It theory, an unzipping app doesn't need anything else than specific file system permissions, i.e. read for a specific set of bytes and write access to a specific filepath.

https://github.com/GoogleChromeLabs/unarchiver

I work on the Capabilities team on Chrome and I think it's pretty cool the web can do more, and provide safe experiences for users.