> On the other hand, this is the kind of paradigm shift that was implemented by operating systems ~20 years ago No. Kernel modules can be installed at runtime.

> On the other hand, this is the kind of paradigm shift that was implemented by operating systems ~20 years ago No. Kernel modules can be installed at runtime. The user just has to grant the application the necessary privileges. This means OS developers do not try to attempt to "strike a balance" between power and safety. They allow both, the unsafe stuff merely requires a fairly simple opt-in. This is the whole crux of the issue. I do not mind security measures, as long as there is a bypass. Mozilla has taken the - in my opinion extremist - position that even bypasses cannot be allowed because they know what's best for users. > I haven't checked, but I seem to remember that you can provide a platform-specific binary as part of an add-on, spawn it from WebExtensions and then communicate with it through the native bridge. I am not aware of any such feature. This used to be true for bootstrapped extensions, but not for webextensions. > I haven't checked myself, but I believe that this mechanism has been published, as an extension called "the WebExtension Extension" or something like that. yes, only works on dev edition though.