You can solve that by requiring confirmation for anything except reading information from trusted sites. Web visits can be done without confirmation by reading

You can solve that by requiring confirmation for anything except reading information from trusted sites. Web visits can be done without confirmation by reading a cached copy and not executing any JavaScript on it with network access (otherwise visiting arbitrary sites can leak information via the URLs sent to arbitrary servers)