Perhaps you're right. Perhaps we need to replace JavaScript with something that can be more easily constrained.

There seems to be something wrong with a world in which it is in some ways easier/safer to run an untrusted binary, by putting it in a container, than an untrusted web page. You can of course put the browser in a container, but it's crazy that we have to resort to that.

Thanks to Spectre and Meltdown, if you want to be really safe when running untrusted code, you need separate hardware.