I don't sync anything browser related between my devices, sadly. This isn't as much of an issue with the current travel landscape, but I've a new m1max and the last omicron wave seems to be starting to recede globally, so I'm going to have to find a solution.

I might just manually copy the profile directory to my laptop when I leave, and copy the newer one back to my desktop when I get home. Mutex! TBH I can really only be using one browser at a given time so "sync" seems like overkill as long as I've only two hands and two eyeballs.

It's changing rapidly. Until recently, Firefox did have a sandbox, but lots of different origins lived together in the same sandbox. Which made it much less useful for many types of attacks. Since Fission (shipping now-ish?), each origin lives in its own sandboxed process—same as Chrome—so on the surface there's no longer any difference.

That said, sandboxes aren't all or nothing, and my impression is that the chromium sandbox is still tighter than Firefox's. (I work for Mozilla, but not on sandboxing, and I'm not in touch with the current state.) That is improving over time, and Firefox already has some types of sandboxing that are ahead of Chrome's.

The main threat model here is malware, probably malware being served to you through an ad network. Run an ad blocker.

Personally, I defend the principle of an ad-funded Web. But not the current practice. As long as ads are in practice an exploit vector, screw 'em.