Waking up and realizing the holes need to be plugged is only the first step on the very long path to actually not having any holes.

As evidenced by the struggles of browser developers, making a solid sandbox is -hard-. They've been trying to make JS secure and sidechannel free for a good part of 15 years now, and there are still issues found every quarter.