There's a solution to both:

1. Not make web browser general-purpose runtimes for arbitrary software.

2. OS builds a general-purposes runtime that's completely sandboxed. So users can run more complex software without needing to worry about cruft being installed on their system.

Unfortunately, browser builders have decided that web browsers are #2.