I believe the change in policy was that you can now implement VMs/scripting engines but that /all/ of the bytecode/code that will run on them must be packaged within the app (i.e. you can't download more code to run dynamically).