@rexo @cato this is the hundredth time I'm saying this just in this thread, but that permissions system doesn't mean jack shit. It's been compromised many times, can be completely bypassed by someone who knows what they're doing, and even if it worked as intended, it doesn't even cover everything, allowing websites to just get direct access to the GPU driver, letting them exploit it willy nilly, with absolutely no permissions in sight
The. Web. Cannot. Be. Trusted. The whole model was made for serving static documents, not applications. But now they shoved applications in the bloody thing and we're supposed to just pretend the whole thing isn't a giant security nightmare