[frankzinger]

The point is to isolate any code which renders HTML, plugins, etc., i.e., anything which processes untrusted external input, something which the main process does not do.