> My point is that to execute randomly downloaded code is realistically impossible to secure This is absolutely not true if you have a MMU and something like a

> My point is that to execute randomly downloaded code is realistically impossible to secure This is absolutely not true if you have a MMU and something like a protection ring. In such an environment code by default can do nothing malicious. The only thing making it insecure in any way are the syscalls offered by the operating system.