They are, but they still need to communicate with the browser process to do privileged tasks and that code can still have errors. Also, a crash doesn't necessar

They are, but they still need to communicate with the browser process to do privileged tasks and that code can still have errors. Also, a crash doesn't necessarily mean a vulnerability, it could be a purposeful crash due to an invariant being untrue, so Chrome will crash out of caution.