A bit OT, and perhaps I&#x27;ve been lulled into complacency, but beyond basic bounds-checking I don&#x27;t think an ideal VM should do much security management at all: I would do away with the java security manager and push all higher level security considerations to the compiler.<p>Sometimes when I&#x27;m larping with the gosu team we talk about an ideal VM with:<p>&gt; A minimum of primitive data types (int64, fp64, etc.)<p>&gt; A minimum of security management (bounds checks, etc.)<p>&gt; No method overloading (making bytecode much simpler: no bridge methods, etc.)<p>&gt; Stack based like the JVM<p>This would be a dream to target as a language developer.