I was thinking about something similar the other day. At the moment, we have 2 webs. One is for websites, and the other one is for apps that happen to run in web. I when apps run in the browser mode (with address bar, tabs, etc.), they should run in sandbox mode, but once you "install" the app (similar to add to home screen on mobile), they should be treated like a native app.