NaCL was one of the layers of protection/isolation on App Engine runtimes. This was one of the reasons why it took years to update even a minor point runtime u

NaCL was one of the layers of protection/isolation on App Engine runtimes. This was one of the reasons why it took years to update even a minor point runtime update on App Engine before the so-called gen2 runtime that used gvisor as the sandbox took over.