True, but then again this raises the question why a browser is needed for sandboxing; it could just as well be done on OS level. And it is done on MacOS, althou

True, but then again this raises the question why a browser is needed for sandboxing; it could just as well be done on OS level. And it is done on MacOS, although I don't know whether the amount of sandboxing it does is comparable to what Chrome is doing. Another issue is that the network communication of a native app can be fenced in by e.g. Little Snitch, whereas fencing in an app running in Chrome is quite challenging. I'd have to apply any firewall rules to Chrome as a whole, instead of the web app. Perhaps there even exists a firewall as a Chrome extension that would allow that kind of thing; but then we quickly approach the terrain where Chrome becomes something like a VM where just everything runs in, just slower compared to native executables.