Securing an application that merges so many functions of a computer is conceptually a lot more complicated than it appears. He starts with a CVE and is routine

Securing an application that merges so many functions of a computer is conceptually a lot more complicated than it appears. He starts with a CVE and is routinely asked but why no SELinux. Conversely, he does not get into the fun part, a JIT, which must make ASLR all kinds of fun. I was aware it is an apple and oranges comparison, but it all kind of sucks with something as complicated as a browser.