That's because the video game engines doesn't have to be hardened against malicious asset files. All the code in a video game runs at the same permissions level

That's because the video game engines doesn't have to be hardened against malicious asset files. All the code in a video game runs at the same permissions level, which you definitely can't say about a random page on cnn.com.