Chrome was designed to be harder to exploit by having a content sandbox from day 1, so that even if you exploited a bug in chrome, you'd have to exploit another

Chrome was designed to be harder to exploit by having a content sandbox from day 1, so that even if you exploited a bug in chrome, you'd have to exploit another bug to get out of the sandbox. It also came with auto updates you couldn't disable so that you couldn't just hack people when they fell behind. That was close to a decade ago. This hasn't stopped nation states who are perfectly ok rolling out windows kernel exploits, but we dont really see chrome exploits in typical exploit kits, so that seems like a win for most users. I hope Rust/Servo become our next leap forward. If they manage to make it productive enough that browser devs accept Rust we'll be in a really good place.