I don't need to use online banking, I need to view pages with text and images, occasionally JavaScript, and not get owned by some random 0-day or exploit. For

I don't need to use online banking, I need to view pages with text and images, occasionally JavaScript, and not get owned by some random 0-day or exploit. For this purpose, it can be argued that the lesser-known and slower-developed browsers are in many ways more secure than the whales: They are developed more slowly, with much less code being introduced day-to-day. They are also less targeted, since hardly anyone uses them. For sandboxing, there are many other solutions, which I think are also more secure if they are externalized. As far as XUL, yes, it is certainly more secure to disallow add-ons which can do anything useful, like modify the UI.