Well back in the days of java applets, running un-sandboxed was considered a "feature" of code-signed applets... and you could then do a loadLibrary of a bundle

Well back in the days of java applets, running un-sandboxed was considered a "feature" of code-signed applets... and you could then do a loadLibrary of a bundled native .dll and go wild