It seems like the real solution is to have proper sandboxing in the OS's, though it would take much more coordinated effort to accomplish. I see no reason why

It seems like the real solution is to have proper sandboxing in the OS's, though it would take much more coordinated effort to accomplish. I see no reason why each domain couldn't have a chroot for example, the browser doesn't need to implement those things.