You are making wrong conslusions. > Angular v1 is dangerous thing by design It is not dangerous. The vulnerability appears when incompetent developer injects

You are making wrong conslusions. > Angular v1 is dangerous thing by design It is not dangerous. The vulnerability appears when incompetent developer injects Angular into a web page from a browser extension in Firefox (I don't know whether it would work in other browsers because they have other extension architecture).