Comment by JoshTriplett

The WASI and Bytecode Alliance approach is based on capability-based security, granting only the access needed for a module to do its job.