There needs to be both signed javascript and signed native code plugins for javascript (similar to JNI). Both of these require significant leadership because o

There needs to be both signed javascript and signed native code plugins for javascript (similar to JNI). Both of these require significant leadership because of the fragmented nature of existing implementations. The upside is an ability to deliver native crypto libraries and other plugins that remove the potential of having its internals introspected or MITMed. The protections against malicious code have to be there, so it would be the same order-of-magnitude of installing any other browser plugin.