http://cypherpunk-handbook.i2p/articles/openbsd.html
The browsers: Firefox, Firefox ESR, Tor, Chromium and Iridium are
limited with unveil (and pledge) and can only have access to Downloads
folder (and their respective folders on the system), not being able to
even read any other system folder/archives, making the browser an
impossible vault for any malware to leave.