I disagree about your last point. I looked at a product design once which allowed one to associate a profile with each third party library. accesses across library boundaries were implementing using classic call gates from segmented architectures which could change memory visibility and syscall filtering.

so while I agree that language integration is really useful, I think you can get a lot out of appropriate support in the runtime, most notably the library loader.