Exactly, I dont even let the "web-browsing" user access anything in /dev aside from null, zero and {}urandom. The browser doesnt have flash or mp4 or other "vi

Exactly, I dont even let the "web-browsing" user access anything in /dev aside from null, zero and {}urandom. The browser doesnt have flash or mp4 or other "video-plaything things", webgl or webrtc enabled. On android (without google), WebApps sandbox to browse "web apps". youtube-dl if I want to watch a movie, simple.