Very interesting idea, thanks for sharing.
Another problem I see is security. It seem certainly possible to proof that the compilation finishes within some computational time bounds using STARK VMs. But proofing that the compiled code is “secure” (in the sense of as secure as you’d properly sandbox it), might be hard to impossible. So applying ZK might even be somewhat complementary to PolkaVM?