> I thought the general consensus here is that security by obscurity is bad. How is running web views in separate processes "security by obscurity"? I agree th

> I thought the general consensus here is that security by obscurity is bad. How is running web views in separate processes "security by obscurity"? I agree that there is nothing inherently secure about it, though it has other benefits, but it doesn't increase obscurity as such (you could argue that the need for well-defined message-passing semantics leads to more decoupled code, decreasing 'obscurity').