In general, what's three point of a link to a sandbox in a conversation about the benefits of sanboxingm

But specifically, this sandbox also kills all interop with your system, other apps/utilities, so way too disruptive for the purpose of isolating just from the network.

Just like any WebAssembly runtime, without imports of external functions, the code can only warm CPUs.

So? Will they not have imports of external functions?

The point being that WASM doesn't improve anything over sandoxing native applications, on the OSes that actually are serious about it.

It should confine itself as the evolution from browser plugins.

So it does improve since the OSes are not actually serious about it otherwise they would've fixed these basic usability concerns years ago.

I haven't said such thing.