> The "idea" I'm talking about is privilege dropping. OK. But privilege dropping alone does not a sandbox make. > seccomp-bpf and pledge are both tools used t

> The "idea" I'm talking about is privilege dropping. OK. But privilege dropping alone does not a sandbox make. > seccomp-bpf and pledge are both tools used to implement sandboxes in browsers.[1][2] Maybe you don't like this terminology, but it is quite well established at this point. A browser sandbox is quite a different thing from an OS level sandbox, which is the context we are discussing sandboxes in.