Hacker News Reader

Running in a VM is not secure by itself. You need something similar to what Android is building via protected VMs.

Indeed running a VM is an exploiter's dream, unless the VM is essentially run by a hardware hypervisor (akin to Android's system).