First class unsigned code in unsafe language support on a physical device seems to be a bit of a worrisome idea.
But you're right that some permissions like complete file access might be a bit too much. They could implement it so that only signed Web apps installed through the app store would get such permissions.