[ngruhn]

> a big attack surface

Wdym? At least web apps are sandboxed by default in contrast to native.

[pjmlp]

Depends on which OS we're talking about.

[pyth0]

Under which OS would a website not be sandboxed? It's the browser doing the sandboxing, not the OS.

[pjmlp]

I am talking about native applications.