WebXDC threat model?

@Simon, thanks for your clarification!

Hey Simon, would really like to read/hear more from you/ or others about this, and what the status of location sharing is more generally. I haven’t found any webxdc apps in dchat that use any geo features, which leads me to believe location sharing is not possible at this time via webxdc? the experimental map feature appears to be a core webxdc integration of some kind that allows for location sharing. Can this be mobilized by other webxdc apps somehow?

Yes, it’s not possible generally. The “location sharing” feature is indeed based on WebXDC, but it is a special case. Normal WebXDC apps don’t have access to the geolocation API.
See Allow access to camera, geolocation, other Web APIs - #4 by WofWca.