Ars Technica used in malware campaign with never-before-seen obfuscation

I am tempted to build a very simple, bare-metal web browser that only reads HTML, and feeds every packet through an LLM that also knows the state of the web browser so that the LLM can detect even unknown exploits.

The problem is the LLM would get hacked.