[mdhb]

It’s because it is actually a somewhat bullshit security model that basically boils down to checking what APIs are you using in your code.

The next generation of runtimes (wasm for example) have this built in out of the box.