[obtu]

NaCL would probably have been mentioned if it was involved. I think Chrome can still do less fine-grained, OS-assisted sandboxing, and Flash on Pepper is cooperating with that.