With this many exploits and, presumably, actors having access to their own, unpublished 0-days, doesn't it make sense to at least run the browser in isolated environment nowadays? I insist on installing everything from the package repository, but Flatpak/sandboxing may make more sense for a browser that is the biggest attack surface on a day-to-day device.

Claude found with ~zero prompting:

- Linux kernel 0click "packet to root" RCE (!!!!!) - Chrome RCE 1click - Safari RCE 1click - Windows kernel remote DoS - Android lock screen bypass

Fully working, end-to-end exploits. Prompting was minimal like "pls make RCE"

And this is just cyber. Imagine what this will mean in 12 months for bio, drones, robotics, etc, etc