it also creates a giant attack surface because its a giant pile of C/C++ (was, dunno current state). the solution has always been to isolate browsers and run on

it also creates a giant attack surface because its a giant pile of C/C++ (was, dunno current state). the solution has always been to isolate browsers and run one isolated browser per "web app" until the web finally dies.