This is a nice application level sandboxing feature on Linux. We should probably have more applications use it.

Nice move. It doesn't have to be about rewriting everything in Rust. Still there are some areas where we can benefit from the language and sandboxing.

Interesting paper about the use of sandboxing in several ecosystems. It's not used much directly but there are clear differences in term of complexity to set them up.

Interesting point. As the memory safety of our APIs will increase, can we reduce the amount of sandboxing we need? This will never remove completely the need if only for logic bugs, but surely we could become more strategic about it.