Should it also be the OS's job to sandbox JS from the websites you visit? Admittedly, that question is made in bad faith -- I know what you mean, even if what

Should it also be the OS's job to sandbox JS from the websites you visit? Admittedly, that question is made in bad faith -- I know what you mean, even if what you mean isn't necessarily "sandboxing": permissions! Android and iOS do it right. One OS-level source of truth that manages application-level permissions for the entire machine. When you frame it that way, it becomes clear that Deno asking for rights on a per-run basis is indeed silly, but only in the context of the user experience... not necessarily the core software design.