Malware from untrusted websites is as old as the internet. With advertisements, even trusted sites can deliver hostile content.

The RCE/Malware issue aside, if the website you go to is a login page for some service, do you know it's the legitimate website? MCP Phishing is going to be a thing