> There’s no reason to imagine that the web will do bad things with your resources that you didn’t ask for and don’t have control over.

Read some security update news from browser vendors and vulnerability researcher posts. There's some weak signals about vendors acknowledging the difficulty of securing the enormous attack surface of browsers built on unsafe foundations, eg MS "enhanced security mode" and Apple "lockdown mode".