[JTechno]

I'm going to make a separate account just to run the web browser, xhost +localhost && su -c web-browser unprivileged-user

[freeloop3]

If you're using xwindows they can just install a keylogger