Comment by ISL

Can anyone comment on how a browser plugin gets access to the desktop? (even if hangouts doesn't do it, there's a remote desktop plugin)

I'm a curmudgeon, but it seems like it's like designing a washing machine attachment that serves as a home security system and pasta maker.

Are there OS or X11 permissions that can restrict userland apps from deviating far from their original use case?