Yeah, I know that's a problem(browsers hate me). You can disable this shortcut in browser settings or download the windows version if you want.
Did that.Also, with Godot unless you used third party native libraries you can blindly trust all exports.
I'm not so sure, you can invoke powershell and cmd scripts using godot libraries. So you can still do a lot of damage if you wanted to.
(see "os.execute" for more details)
