Craziest thing is the mixture of:

- A browser engine outdated by two years, with known-exploited CVEs

- Chromium sandboxing completely disabled [0]

- JavaScript V8 Engine with JIT enabled [0]

For me, it's surprising we haven't seen more of these yet.

[0]: https://github.com/obsproject/obs-browser/blob/f555da02b1d59...