seems a bit dangerous though to risk for a browser with so small market share

They should have built it in years ago, but called it “web security filtering” or something and included only a basic security blocklist, but left it easy to add other lists.