> For example, Flash was an entire black-box, top to bottom, with a runtime, codecs, UI, a JS engine, etc., which downloaded code from the internet to run it.

And, notably, the DRM modules can be sandboxed far more than Flash can.