We've also been discussing it over on reddit: http://www.reddit.com/r/webdev/comments/22gxx1/untrusted_a_j...