browsers can have security vulnerabilities in their complex parts that grant the website powers it shouldn't have. depending on the kind of vuln, it could enable readout of browser memory contents (like cookies containing access tokens), modification of it, execution of arbitrary program code supplied by the site, etc.

Well when using P2P sites you have clickbait, popups, etc. Do aviod that you use blocked, use prowlarr/jacket to get the MAG download pregenerated, no website needed. Anything you click on or download can scam and infect you. That's why you're browsing habit & emails cause you the most malware/viruses.