Even if modern browsers lean more on kernel features, initially the sandboxing in browsers is implemented through a managed runtime.