Totally agree, and I think part of the popularity of this whole 'web application' swing is because browsers like Chrome et al are so well sandboxed also. It makes it almost entirely risk free to automatically download and run random code (javascript), something that would be entirely unthinkable if done natively in today's environments.