What I'd like to see is a memory safe JS interpreter (no JIT) - yes, it will be slow, but 90% of websites don't need JS go that fast, but JIT opens up a security can of worms.

So if I go to Google docs, I can toggle spidermonkey (or whatever Firefox's JS compiler is called nowadays), but if I go to $randomwebsite, I'll get a secure and usable web.