[dmix]

Do they even try to break Safari at those pwn2own events?

Or is it just assumed to be an easy target/too niche/no money from Apple?

[om2]

They do. Breaking out of the sandbox is not trivial though over time people have found ways to do it.