The web is an application platform. It is really the remnants of its history as a document presentation platform that makes it add all these ultra high level de

The web is an application platform. It is really the remnants of its history as a document presentation platform that makes it add all these ultra high level declarative features that make up the bulk of the complexity of a browser. Ironically, these features, much more than scripting, also make up the bulk of the attack surface for browser exploits. Features like USB and VR are not the problem, you can just turn them off and everything still works, but one little change to CSS layouting can turn a web page into salad.