Interesting post at The Reg about a crisis of confidence in browser security. Longer than the usual Reg post, but worth while reading.
Brings to mind Larry Ellison's comment (paraphrase): you've got no stinking browser security; get over it.
The article doesn't discuss a different approach to Internet/browser security, currently in use Chez Bore Patch: the lovely Mrs. Bore Patch refuses to give up her online shopping despite my best efforts. She knows what the situation is (I've told her), and I know what the situation is (she's told me). Oh bother.