Just a browser that doesn’t properly sandbox javascript would be a fucking disaster. Even only be limited to data of other third party apps, because users are using third party apps.

It’s not “if”, it’s “when”. It won’t be an “accidental” security lapse either. Although that’s what will be claimed.