> A random site with "just html" has the possibility as well to "spread viruses" with a unknown zero-day with for example a image handling exploit, or a novel s

> A random site with "just html" has the possibility as well to "spread viruses" with a unknown zero-day with for example a image handling exploit, or a novel sort of ram rewriting attack. Technically possible, but the vast majority of sites that can get you infected just by viewing them depend on JS. I'd much sooner trust an HTML document than a PDF file from some random website.