Browser environment provides a living example that it's possible to have a proper application sandboxing. Even with multiple different produciton-quality implem

Browser environment provides a living example that it's possible to have a proper application sandboxing. Even with multiple different produciton-quality implementations. A more interesting and practical question is how difficult is it to have proper application sandboxing, while keeping reasonable backwards compatibility level with existing code. I think that it's near impossible, that's why I don't hold high hopes regarding any existing OS sandboxing. But new systems like Fuchsia might actually bring us Android successor able to run any code without fear.