Lightweight web browsers don't have as large of an attack surface, particularly if they eschew JS, cookies, etc or you disable them. Nyxt is alpha software, so YMMV until it's more feature complete, and independently audited to correctly implement WebKit and WebExtensions. Run Tor Browser without JS in a VM for security+privacy.