Common browser security myths debunked