> V8 has pretty decent isolation, but honestly, for a product like this, WebAssembly is your friend — it was quite literally designed for this type of product.

> V8 has pretty decent isolation, but honestly, for a product like this, WebAssembly is your friend — it was quite literally designed for this type of product. The big thing that WebAssembly allows you to do security-wise is to execute multiple untrusted programs securely in the same address space. This is a new capability for some languages, but JS has supported it since day one. The most popular WebAssembly runtimes are already the JS runtimes – Cloudflare uses V8 isolates to run their edge workers, for example. You could use a lighter weight and purpose built runtime for WebAssembly like wasmtime, but the immediate benefits of doing that are unclear to me