I mean there will definitely be exploits. It does still seem dramatically different to need to get an escape out of the js sandbox than to just be handed privi

I mean there will definitely be exploits. It does still seem dramatically different to need to get an escape out of the js sandbox than to just be handed privileges by design. Particularly if (in some glorious future) the js vm is written in a safe language, not C++.