Take a moment to think about this please. I get this is a topic you're passionate about but you're making a number of false assumptions. > NOPE, some "firewall

Take a moment to think about this please. I get this is a topic you're passionate about but you're making a number of false assumptions. > NOPE, some "firewall" in a consumer router does not suddenly make a 20+ year old OS secure. That wasn't the claim. The claim was it eliminates a chunk of risk (ie someone connecting to you from outside). So the risk is now "just" code you import and run. > The OS accesses the internet, not the browser Which part of the "OS" are you concerned about? Please be specific. > It's funny how you just mention some 20-year-old technique that even grandma knows about. I don't recall seeing you comment on any techniques. If you're so much wiser than the rest of us, then please do share these techniques that we've all missed. > But assuming the Browser is secure, the browser communicates to the internet "hey here is an IP" that fact alone is a security risk as the attack may come directly to the OS not the browser. How does it? A buffer overflow in the TCP/IP stack? Maybe. Have you got an CVEs to back that claim up? Maybe DNS? But the Browser can easily bypass the hosts DNS resolver so this is a solvable problem. Beyond that, the browser manages the rest. > Heck, this Browser may even send a user agent that actually says it's some old windows that is no longer supported, lol. User agent string is trivial to change. It's literally just a HTTP header and there are numerous browser plugins that support doing just this. --- As I commented in another reply, we need to be clear about attack surface and threat model. In the case of the former, most (nobody said "all") of the security concerns are sandboxed by the browser. In the case of the latter, if your threat model includes targetted attacks then this browser on an older OS would clearly be the wrong choice. But for most people this would appeal to, that isn't a risk worth accounting for. ie this is safe enough for anything not important.