All of those issues are from legacy browsers nobody should have been used in years.
> Beyond that even Linux users have faced zero days. The web is inherently unsafe which in practice is rarely a issue for the cautious, but that’s only so useful.
Go ahead and try to find me an exploit working right now to access your local files, they are so rare I can't remember seeing one in a long time. If you are going with zero days, Apple also had an exploit not that long ago where every app could snoop into the data of any other app as well, pretty scary and that also happens to them.
Not talking about security exploits but just security design, the permission system is broken by design on native apps. On the web, you do indeed need a zero day to access user files, on a native app, you just need to go ahead and follow the documentation, pretty big difference.