> Process-based sandboxing was too heavy in old hardware systems, but on modern ones is the best approach. They actually started first with full process isolat

> Process-based sandboxing was too heavy in old hardware systems, but on modern ones is the best approach. They actually started first with full process isolation, then realized that it had an outsize impact on performance, and now they're going back because the consequences for security are now known. There have been spectre-related patches going into chromium and v8 for the last few months, and they just keep coming, it's hard to overstate how much work must be done to have a decent probability of not being exposed to the known variants of these bugs in a software isolated system.