"web apps run in a secure sandbox. Native code is insecure by comparison." Of course it is safe. You have at least two options: software sandboxing (NaCl, Vx32

"web apps run in a secure sandbox. Native code is insecure by comparison." Of course it is safe. You have at least two options: software sandboxing (NaCl, Vx32, OS-based sandboxing...) or proof-carrying typed assembly. Of course, the first option is complicated by the horrible state of the most prevalent hardware architecture available today, but that's something to be fixed in the future anyway. "irrelevant in the age of multi GHz CPUs in your phone" Oh, thank you very much. You're perpetuating the trend of "What Andy giveth, Bill taketh away" with this kind of thinking. "native platforms have bugs too" And studies confirm that the amount of bugs is largely proportional to the LOCs. The web-based approach, however adds a few million lines of code to something that would have, say, tens of thousands at most on its own.