Because Apple has this broad approach, it means there’s no value in malware creators trying to target opening an HTML page within Safari as a vector to exploit.