While newer browser versions are not infallible, they dramatically reduce the risk of this happening because at least known security bugs are patched.Īdditionally, a signed certificate is extremely easy to acquire with services like Let's Encrypt. A malicious site could run javascript that takes advantage of security holes in the browser and install spyware on the host system or hijack the browser. But when using a piece of software that connects to the internet and runs code without the user previously checking it (infact, that's the entire purpose of a modern web browser), one of the most important things is for the software to lack wholes to prevent the code from escaping into the system. Yes, it is important where you download it.
