Nothing executes more unverified untrusted code than a web browser will. You want some separation between it and everything else you have going on.