I think the idea is that the OS has a better chance of keeping the plugin isolated than a VM sandbox. I'd certainly trust v8's sandboxing over any attempt to d

I think the idea is that the OS has a better chance of keeping the plugin isolated than a VM sandbox. I'd certainly trust v8's sandboxing over any attempt to do it myself but OS level sandboxing + IPC seems like an even better idea if you're trying to be really sure.