Why file-borne attacks start in the browser, not the endpoint, and how browser-first security stops threats before files ever reach users.