[mainframed]

But couldn't that lead to a lot of permission errors?

If I have a complex program with a lot of dependencies.

What happens if one of the dependencies suddenly tries to write to `~/.local/dep_name/cache.raw` and I did not explicitly allow it to do so, since I didn't know it needs that location? In docker it would just create that folder in its own volume and the volume is deleted after the container is removed (if the volume is not named).

If I understood correctly from your comment, each WASI-runtime does not have a corresponding filesystem/volume.

But what does it do then? Will it simply crash?