I suppose. The whole idea just seems to miss that for many, online data is more important than my local pc. A web extension that deleted my google account would be more disruptive than an XUL extension that formatted my hard drive. XUL is a superset, but restricting to "web only" leaves you with the most significant subset...at least for me.