Comment by hrmtst93837

Most terminals already trust clipboard access and window titles in ways that can be abused, no scripting engine required. Embedding a web engine would just make the threat model explicit instead of the current half-baked mix of text UI plus unsanitized metadata channels. If your workflow includes pasting from a terminal or clicking strange links you've already lost unless your threat tolerance is set near zero. It's a decent reminder that the stuff we treat as just text keeps accumulating side channels faster than most users can keep up.