It's a step in the right direction, but it's not as good as it could be, because it's hindered by compatibility with unix. A native process on its own can't do

It's a step in the right direction, but it's not as good as it could be, because it's hindered by compatibility with unix. A native process on its own can't do much harm. Only with syscalls can it access other processes, the network, hardware, files, etc. Executing some random code shouldn't be dangerous.