Might it be good to focus on hardening the browser first?
Run it under firejail, or as a snap?
Add something like ublock origin to it?
Maybe you've already done those things though.