The web's sandboxed security model makes it better for users. And that in turn drives popularity.
I think the same could be true for a good application platform. The trick is using the sandboxing + capability based security model to enable "new" usability features that traditional applications can never deliver.