Although the browser is necessarily very highly privileged, it'd be best practice to drop whatever privileges it doesn't strictly need. This is platform-specific work; it will be different on macOS vs. Windows vs. Android, and so on. This is the meta-bug. For each platform, we'll make a dependent bug.