A lot of social engineering attacks die the second you have domain bound 2FA. Not everything, but a lot.
But the idea that we'll squash all of the critical vulns is simply nonsense, despite the weird Firefox blog posts that indicate otherwise.
We don't need to squash all of them, we need to squash all of them that are practically findable by current and very near term frontier models.
We don't need to squash all of them, we need to squash all of them that are practically findable by current and very near term frontier models.