On balance, though, since most people go almost exclusively to well-known, uncompromised websites that are legitimate and also trying to harvest data, privacy protections are more important. Defend against the attacks you know are happening and all.

Besides, most attacks are social engineering these days, and even the most secure browser on earth won’t defend against that. The recent flurry of high profile YouTube account hijacks was accomplished via malware that stole session tokens from both Chrome and Firefox.