True, but that's what the whitelist is for. Browsers are so complex these days that visiting a website you've never heard of before may as well be you running a random executable. Will your browsers security hold up if the website is hostile? Probably, in the same way the security features of your OS and/or anti-malware software will probably keep you safe from a random malicious executable.