I had the same thought. The hard parts really are the containerization of apps, and the auth and permissions model. Sandstorm as far as I know is the best thought out attempt at tackling those problems.