>It's a security concern for Apple, not necessarily a strategic one.

You want me to believe that the engineering might of Apple haven't figured out the security for apps to make use of the new JS engine without getting full privileges? I think it's just not a priority for Apple.