> user needs protection from the third party code that they run Unfortunately the above then often crosses the line over into "protecting the user from actuall

> user needs protection from the third party code that they run Unfortunately the above then often crosses the line over into "protecting the user from actually accomplishing useful stuff". The file sandboxing approaches I've seen so for e.g. commonly ignore the existence of file formats that don't consist of a single, atomic file.