The sandboxed iframe pattern gives Datasette a safe, extensible surface for running untrusted HTML+JavaScript apps with direct access to a persistent relational database, without risking exposure of private data held in an authenticated Datasette instance.
Security-conscious practitioners handling sensitive data in ChatGPT now have a deterministic, non-AI-evaluated control to block the exfiltration stage of prompt injection attacks — the hardest-to-defend leg of the threat model.