And, similarly, you can't go to any sort of multiprocess architecture (or multithread) model if extensions can mutate more or less anything at any point, and that's not just about security, that's also about what plenty of users have been asking for for years—performance.