Sandstorm, an open-source platform, offers a radical approach to running web applications, combining app-store simplicity with robust, containerized security. By isolating each document and application in secure 'grains', it mitigates 95% of vulnerabilities while enabling easy self-hosting and unified access control.