Also sandboxing and strong permission boundaries ie when things fail, contain the damage