>>42075195It's just my opinion so treat with a saltlick, but I wouldn't use anything except Firefox or Chrome/Chromium. The web landscape is so complex, we've given so many features and permissions for what is essentially executing untrusted code every time you click on a link, and I simply do not have faith in any volunteer driven project to keep up with security fixes for software with such a massive attack surface as a web browser. You think you're ok and then you wake up and read about CVE-2025-2783 (Chrome/Chromium) and CVE-2025-2857 (Firefox), bypassing whatever sandbox magic devs wrote for their browsers. It's heartbreaking that such critical 0days can appear and are easy to make user run them, but what I can do about this is get fixes for those vulnerabilities as soon as possible on my machines. It's logical that browsers deriving from Chromium/Firefox will get them later than Chrome/Firefox itself.
One could say "lol simply disable JS" (and CSS as well, because Firefox recently had another sandbox escape or whatever in CSS engine, yeah, fun) but to me this is a denial of reality we're in. I don't know, it feels irresponsible that this is the direction web went to. Maybe if people didn't want to make webpages super interactive, we'd have more native apps instead, but then we'd complain that PonyOS doesn't have a 4chan client.
Anyway, to me it's a miracle we still have Firefox maintained well enough. It feels like it exists only by funding from Google's default search deal, so that Google doesn't get hit with anti-monopoly lawsuits like MS years ago with Internet Explorer. Hurts a lot to see FF leadership impose suspicious changes regarding user data monetization, especially since I realize web browser development from scratch must cost a lot.
Also things I'm not qualified enough to discuss: Firefox's actual security deficiencies compared to Chromium. GrapheneOS devs talk a lot about it, and while someone might say they're annoying about it, they seem to simply be very autistic about security. However I really don't want to end in a world where there's only one browser engine, see also: webdevs fucking testing their shit only on Chrome (because this is the default "internet" on Android and on Windows, either as Edge or as installed by user actual Chrome) and Safari (because iOS forced engine and macOS default). It's so sad. 