Comment by _ea1k

TBH, I've never understood why they don't just decouple the browser from the OS and keep providing browser updates for as long as possible.

They wouldn't update the base kernel, but they'd be no less secure than the average windows box.