Hacker News Reader

The only bounds that are checked is the overall size of the linear memory block, there is no bounds checking inside the same segment.

Right. The sandbox can scramble its own state, but as long as the accessible APIs have a protected interface it can't mess up the overall game.

Which is exactly the point made by GP.