Hacker News Reader

If it runs inside the sandbox and the guest is compromised, can't the guest just lie?

Absolutely. That's why overlay is not the default.

That's... uh, an interesting approach to security.

What is? Defaulting to the most secure method?