> it's pretty common for apps to either find ways to escape it These sound like security bugs, which should obviously be addressed, but "there are bugs" should

> it's pretty common for apps to either find ways to escape it These sound like security bugs, which should obviously be addressed, but "there are bugs" shouldn't be a reason to dismiss the entire goal of isolation-based security. When it comes to the browser, there are obviously occasional issues to do with colouring of visited links, sandbox escapes, information exposure due to speculative CPU execution. Overall though, what's important is that there is a security model and that the implementation issues are addressed.