How on earth would that work for their product? They need to access the data so they can render it.
Not to mention, it's not like Chrome can run Javascript without looking at the data, and if they're not running Chrome, they'll start getting into compatibility issues.
Sure, it's the ultimate sandbox for the code itself, it probably protects me perfectly from Meltdown attacks against other programs on my main system, but I don't think that's enough to call it 'endpoint security'.
So they need to figure it out otherwise it's only valid for personal use, which is not exactly the money is, imho.
Maybe some self hosted solution for corporate departments? Or waiting for an acquision from Citrix or VMWare...
Or just an IT/security department that is blissfully unaware of the shenanigans that some of its users are up to. Especially if people are accessing this from outside of the corporate network to start with.
My company uses webmarshal which fronts requests and blocks pages deemed not good for productivity/data security. In that type of situation you already have an intermediary so mighty could make sense - make everyone use mighty and give it a custom blocklist. Obviously not a situation that employees would be a fan of, but it’s something that corporate is already doing, and mighty could improve the experience.
My issue is that it’s not a product I could feel good recommending to anyone, at least at the high pricing that was proposed in the last discussion. In an era of $999 M1 Macs (and even cheaper AMD laptops) and readily available financing options, it doesn’t make sense for anyone to throw their money away at a SaaS service that simply cannot perform as well as local Chrome on a modern machine.
I could see the narrow use case for limited situations where someone has
1. Weird IT department restrictions that require them to use old, slow computers but also
2. Budget rules that allow them to spend monthly money on a SaaS but not on financing the hardware they need to get their job done and
3. Guaranteed high speed internet all of the time and
4. An IT/corporate security department that is okay with them sending all of their keystrokes, login info, and browser data to a 3rd party service
Surely this situation exists, but it still feels like Mighty is targeting a broader audience by providing untrue claims about remote thin client technology somehow being faster than a halfway decent local machine. I’d feel equally uncomfortable if Stadia was charging $50/month while claiming to be lower latency than local gaming.
The counter arguments about disrespecting hard working startup founders or doubting visionaries feel like a strawman response to legitimate questions about the value of their service. The technology and execution look to be good, AFAICT. It’s the product, pricing, messaging, and value that I can’t recommend.