[tptacek]

The issue is with browser Javascript, specifically with sensitive Javascript that has to coexist in the same runtime and even the same variable scope as content-controlled code.

[jaekwon]

All client code is essentially equally sensitive. I'm not sure why you're making a distinction at all.