A crucial difference there is that a zero-day in a browser, once identified, can be fixed

→ View original post on X — @simonw