It sounds impossible to make this browser secure. They're allowing Java and NPAPI plugins as an explicit compatibility goal.

Granted, security isn't a stated goal here. XP users unfortunately can't expect that anymore.

Are there any modern HTML5-compliant browsers that support XP anymore?