Indeed, the point of NaCl is that it's not going to be another ActiveX-style security nightmare, so people might actually use it. That will be great.