Just to provide some balance: Chrome exploits are not as rare as you claim in this post. Pretty much any time Pwn2Own or similar contests are held, with non-tri

Just to provide some balance: Chrome exploits are not as rare as you claim in this post. Pretty much any time Pwn2Own or similar contests are held, with non-trivial prize money, somebody brings a fully working Chrome exploit. If you check https://zerodium.com/program.html https://zerodium.com/program.html you can see that the current market prize for a Chrome exploit with sandbox escape is about 80k USD. Firefox is cheaper (30k USD), but only by a bit more than factor 2. (I've been working on security vulnerabilities pretty continuously since 1998, so I somewhat know what I am talking about) In general, for any major browser: Given the size, complexity, and code churn, an attacker just needs enough motivation / time.