This is something I was hoping would be possible in the future, but didn't realize an implementation was already in place. I'm surprised I've never heard of it.

There's one problem though. Here's how it should be implemented, in my opinion.

<iframe src="this_iframe_is_sandboxed.htm">

<iframe src="this_iframe_is_not.htm" nosandbox>

I disagree with making security opt-in.