That seems to work for now, but I'm thinking more of where it's headed. Websockets, WebRTC, WebWorkers, and then other pending proposals all eventually end up being like a "VM" running apps on your local machine.

At some point, it's much closer to an "App Store", which arguably has finer grained (and more usable) control presented to the user to manage what applications can (and cannot) do.