Sorry you found it unsubstantial. I mean to express distaste for people who tend to loosely throw the terms "privacy" and "security" around, especially when recommending laundry lists of configuration options, patches, extensions, etc. There is often little to no regard for threat modeling and pragmatism. Take "gHacks/pyllyukko base is kept up to date" for example - these batch tweaks and their effects are hard to understand and apply for the average user, and unfortunately tend to break the mainstream web.
I view projects like these as temporary bandages that pacify users (those technical enough to even be able to use them) in the now to ignore the larger and more fundamental issues at hand. Upstream should adopt reasonably sane defaults, because whack-a-mole with complex software simply isn't sustainable and the projects in question will become less effective over time as maintainership wanes. With regards to further hardening options, there really needs to be better upstream documentation, education, and accessibility. When that is realized in the free/libre browsers with the majority market share, then I am optimistic that the mainstream web will heal in accomodation.
> I mean to express distaste for people who tend to loosely throw the terms "privacy" and "security" around, especially when recommending laundry lists of configuration options, patches, extensions, etc.
This is a much, much more useful description. And I'd agree. Usability is a critical part of privacy and security, and recommendations for tools that cater exclusively to advanced users (whether the tool developers realize that or not) can do more harm than good.
Not just recommendations for advanced tools, but the unfortunate reality that they are currently necessary means. I reiterate - this functionality must be made upstream, accessible, and visible.
I find that "upstream" might be at odds with security/privacy, both in terms of funding and data collection (benign reasons being debug/crash data collection as well as "what and how do people use this")
Icecat has issues with so many sites because it wants you to block no free JavaScript. If you use it as intended, the internet isn't the same and is it even more private since there are fewer extensions?
You could make a totally open-source, libre-licensed DRM enforcement framework -- any user willing to dig through it could probably modify and defuse it, but out of the box, it would be an example of free software which aims to defeat freedom.