Just to nitpick the first point, ARC apps run inside the NaCl sandbox so there's no potential for harming the strong security model in ChromeOS