I think they should stay but run within a very hard virtual sandboxed environment totally separate from user's system. That might be the sweet spot. Still not

I think they should stay but run within a very hard virtual sandboxed environment totally separate from user's system. That might be the sweet spot. Still not 100% secure and there might be some attack vectors but better than what we have now.