As I was talking with a friend, he told me about a cool security feature #OpenBSD has got. That is, limits scope of the browser. In the case Javascript escaped the sandbox, the damage is limited.
But really, is there a security bug in #Gecko or #Webkit with which Javascript can escape? :)
Disclaimer: I know very little about security, BSDs, and kernel level stuff.