A> THere are very good solutions for containerizing web browsers already. I
A> remember listening to a podcast in which they interviewed the head of a
A> startup which did web browser containment. What they did, essentialy, was
A> to fire up a web wrowser in a remote vistual machine and forward the GUI
A> to the client computer - the web browser was not even running in the
A> user's computer.

Yes, I have seen some options in action.  You can virtualize browsers using VDI
today.  There is also "remote browser isolation" which can kick off a browser
that runs in an isolated application container.  

The pro is the browser is basically in a sandbox.  The negative is the browser
is in a sandbox - so if you download files, not as simple to move things around.
 If the intent is for an average user that just web surfs only and is a high
"click risk", this is the best option.  Even if the virtual browser gets
infected, it will revert back to it's original state after the app is closed.

- Mark

--- WWIVToss v.1.52 
 * Origin:  http://www.weather-station.org * Bel Air, MD -USA (618:100/12.0)