> The downloaded code is bytecode at an abstraction level a bit below C but quite a bit above assembly.

You just described PNaCl, not NaCl. NaCl is architecture specific and already sandboxed (ie the SFI part of NaCl), whereas PNaCl is not.