[ashishb]

How many startups/small companies that uses next.js do any static verification?

[mgraczyk]

I don't know, but I am just pointing out that the problems here are really about execution, not vision.

There's no reason we can't properly enforce security boundaries in the browser, we already do it between the website's code and the local machine.

These ideas have been around a long time and predate the internet. See for example Liskov's work on Thor:

https://dl.acm.org/doi/pdf/10.1145/233269.233346

[ashishb]

If a vision has not been executed despite so many people trying may be something is wrong with it?

[mgraczyk]

No, many have executed this vision. Facebook was doing this since at least 2010