From Traditional Security Perimeter to Software-Defined Perimeter

> browser-based threats, including threats from malicious websites, are nullified.

I’m skeptical about that.

How does this keep traditional browser-initiated 0day chains from compromising the machine?