> This right here is why security will never be mainstream, because consumers value convenience over the ability for their browser not to run arbitrary code.

You say that as if it's a bad a thing.