[mavdol04]

I see what you mean, but i think there is room for both approaches.

If we want to isolate untrusted code at a very fine-grained level (like just a specific function), VMs can feel a bit heavy due to the overhead, complexity etc

[quotemstr]

What you really want to do is decouple the sandbox specification annotations from the sandbox implementation backend, yes?