I don't think these are especially relevant to the threat models of average users. Security for most people means not getting malware from random sites and not

I don't think these are especially relevant to the threat models of average users. Security for most people means not getting malware from random sites and not having all their data given away, and noone is blowing an 0day sandbox escape on an average internet user. Adblocking extensions go a very long way in terms of keeping average users safe. If you're a potential target of sophisticated actors (of any level of sophistication above script kiddie) then you're not really the target audience of generic browser advice.