> there's no reason to believe locally-installed applications won't have exceeded browser sandboxing capabilities What? Sure there is! 1. The reason to believ

> there's no reason to believe locally-installed applications won't have exceeded browser sandboxing capabilities What? Sure there is! 1. The reason to believe native apps' sandboxing won't exceed the browser is that any sandboxing that works on native apps would also work on the browser app itself. 2. There's also 2 reasons to believe native apps' sandboxing may always be inferior to the browser: (a) The Web has wider reach, and people are already more confident/careless visiting strange websites than downloading and running strange apps, so exploits targeting the Web are more valuable and therefore more resources are spent battle-testing it. (b) Native apps currently have deeper access to the device which makes it easier for them to do bad things, and (similar to reason 1) will never have less access to the device than the browser app which is also an app. (I'm aware there's arguably a slight exception here about Mobile Safari and W^X, but I don't think that disproves the overarching reasoning.)