Some quick thoughts on the Arc Vuln
It's extremely severe and very dumb.
It points to TBC not being a security first company, which is worrying for a browser, which is probs the biggest security surface in most people's lives
That being said, I love that TBC is a product first company, for what is also one of the most important product surfaces in people's lives
Boosts is a really good example of this, it's such a sick feature, and I think a meaningful innovation on like greasemonkey type scripts.
I think there's a worrying local minima we can get stuck in where the stakes are so high for a browser that it's fully a sphere only security focused companies can exist in and there's little to no innovation on the actual interface/experience layer