A user who is connected to an unprotected network via a protected network
is able to browse the Internet without concern that unauthorized code
will execute within their local workstation as the result of a
vulnerability within the browser executing on a special virtual machine
or a browser module. Any unauthorized code will only affect one of a
special virtual machine or a browser module.