thats why we need wasi/wasm bashed sandboxed plugins scoped bashed on capability it needs.

i think lapce supports wasi plugin but overall ux is not there yet when i last tried.

https://github.com/lapce/lapce