I am also curious if the new generations of sandboxing tech would change anything. Something like

https://github.com/nolabs-ai/nono