Okay, I have to admit that that's leaving me a bit nonplussed. Assume for a moment that I am concerned about the security implications of running an open-source Tomb Raider engine implementation. How exactly are you proposing running this in a more-secure fashion?

If I run an executable on my platform -- say, an ELF binary on Linux -- then normally that binary is going to have access to do whatever I can do. That's a superset of what code running inside a Web browser that I'm running can do.

Are you advocating for some form of isolation? If so, what?

EDIT: And I've got another question for you. Let's say that you're worried about security of browser APIs. How do you avoid this? Because if your browser is vulnerable to some exploit in its WebGL implementation, not clicking on a link explicitly labeled as going to a website that uses 3D -- which is what you appear to be urging people to do -- isn't going to avoid it. Any site you browse to -- including those not labeled as such -- could well expose you to that vulnerability.

EDIT2: In another comment, you say that you want to trust the "kernel" instead of the browser. Okay, fine. There are a whole class of isolation mechanisms there. What mechanism are you proposing using? Remember that you are needing to give access to your 3d hardware to whatever software package is involved here, and the Linux kernel, at least, doesn't have a mechanism for creating virtual, restricted "child" graphics devices. The closest I can think of on Linux you can get at a kernel level there would be pass-through from a VM to a dedicated graphics adapter, which probably isn't going to be an option for most people and I have doubts about being a carefully-hardened pathway compared to browser APIs.