Are they insane?!

If this is true, then God help us all. The extensions WebCore would need to support an adequate widget API are nothing short of complete and utter lunacy from a security perspective. The possibilities for exploitation are enough to make me sick to my stomach. Note, for example, that in order to put together that demo page, they had to make AddressBook available through JavaScript. Can anyone else here see the possibilities for Safari-specific worms?

However, I will now concede that they did not in fact steal from Konfabulator. No need to, if you're going this route. But I can honestly say now that I wish Apple had; that would be far better than this insanity.