I think it works fairly well for the use case of a scripting runtime instead of an application runtime. Consider a common command such as: > curl -fsSL https:/

I think it works fairly well for the use case of a scripting runtime instead of an application runtime. Consider a common command such as: > curl -fsSL https://myapp.io/install.sh https://myapp.io/install.sh | sh Thats pretty scary. It might do anything to user data. The deno sandbox would offer more assurances of course: > deno run --allow-write=~/.myapp https://myapp.io/install.sh https://myapp.io/install.sh You know it would only access what you expect. Same with another command: > deno run --allow-read=./my-data.csv https://data-app-thing.io/visualize-data.ts https://data-app-thing.io/visualize-data.ts my-data.csv It's as described, a browser, not a server platform.