[hedora]

I was going to suggest something similar. Limit scope to something that is pretty (all of the pdf/ps display model?), but doesn’t support arbitrary code execution or surveillance.

Prodigy (a walled garden network like aol or compuserve) in the US tried to build this in the late 80’s / early 90’s (not with the same motivation—-they were trying to build a terminal with vector graphics for the masses).

For this sort of project, and the emotional reasoning you have for building it, I truly believe less is more.