But if you are self hosting, do you need to worry about that?

Either way, I appreciate the detailed response. And looking at the browser as a strong sandbox does seem smart.