They often are heavily isolating the browser. This is the reason a kernel exploit is also needed, but getting the first foot in is often an important part and most easily accomplished with the browser.

Game consoles are some of the most secure and heavily exploited systems around, since there is a very strong financial incentive to secure them and a strong incentive to break 'em open (compared to almost any other consumer tech).