security is multi-layers. You should not rely on either process isolation (ie process sandbox) or logical sandbox or fault-free code...

that said i think firefox's choice is more sensible.