It was possible to download lossless FLAC files (they got them straight from Deezer) though, so higher quality than anything downloaded from Youtube etc.

Did you read the sentence before that? A malicious website could read data from other websites(opened in different tabs), and also passwords stored in the browser, etc… There is no additional system exploit needed for that

Here you can find a good explanation on that.

Mull (from the DivestOS developers)

But nowadays I’m using a Chromium based browser on my phone because Firefox on Android doesn’t support process isolation

Austria, mid 20s, yes

Not xml

OpenSUSE, mostly because they differ too much from other distros, often even without any (obvious) advantages.

For example a lot of file paths (config files and such) are different, and when being used to other distros (or just following a guide from the internet) it takes longer to find it (I know there is Yast but I’m not a huge fan of that tool either)

Also, Manjaro