No per site process isolation, X11 exploit on Linux, and more telemetry to Google than Chrome would be a good place to start.