> run in-process, with zero "protection" between them and the host Perhaps that's the current state of things, but like you mentioned with web browsers, it's a

> run in-process, with zero "protection" between them and the host Perhaps that's the current state of things, but like you mentioned with web browsers, it's a thing that can be done if you're willing to sink enough effort into it. Browsers had to go through this process at some point too. There's nothing that prevents plugins from running in a sandbox where the only I/O is waveform in, waveform out.