Which simplyfies picking parts out and moving them into https://en.wikipedia.org/wiki/Rump_kernel , or FPGAs.
I've been wary to use that on a system locked down with https://en.wikipedia.org/wiki/Veriexec exposed to the net in the past, but not anymore.
OTOH it's all moot, or are you using a browser with settings which BLOCK JS, WEB-RTC/GL/GPU and countless other stuff by default?