> browser-based threats, including threats from malicious websites, are nullified. I’m skeptical about that. How does this keep traditional browser-initiated

> browser-based threats, including threats from malicious websites, are nullified. I’m skeptical about that. How does this keep traditional browser-initiated 0day chains from compromising the machine?