I know Servo is currently a research project, but maybe Mozilla's plan is to get a process sandbox from it?

"... The [Servo] engine processes will use the operating system sandboxing facilities to restrict access to system resources."

https://github.com/mozilla/servo/wiki/Design