[marshray]

The important thing is the ability of the user to differentiate between the local system and sandboxed internet content. Dancing pigs notwithstanding, a big part of desktop security still relies on the assumption that the legitimate user will refuse to authorize malicious content when they have all the information they need to recognize it.

So blurring the lines between browser sandboxed content and desktop applications will decrease security. Anyone remember the MSIE desktop integration debate?