> Having said that, they should never be considered as a multi-tenant (N customers) isolation 'security' barrier. They are there for scaling not security. V8 i

> Having said that, they should never be considered as a multi-tenant (N customers) isolation 'security' barrier. They are there for scaling not security. V8 isolates are absolutely designed for security. For 10 years V8 was the only security barrier between sites in Chrome. Now they have retrofitted strict site isolation for defense-in-depth, but that doesn't mean the V8 team suddenly doesn't care about security. Chrome wants both layers to be secure and will pay a bug bounty if you break either one.