Exactly, and just to add: browsers are where I draw the line in terms of security. If the OS is old, whatever, my router has a firewall and I trust the applications I install.

But my browser is running gobs of random Javascript from who knows where every day! I guess you could do the thing where you disable Javascript by default and re-enable it on select websites; I'm personally not willing to do that.

So a browser really needs a good, up-to-date sandbox. There has to be protection somewhere in the chain.

And some sites refuse to load if your browser is too old. I think Google was like that — requiring a newer browser to access, for example, your Google drive.