In the default configurations not really.
In the default configuration, the login user runs unconfined, that is, there are no SELinux restrinction on user processes, and with sudo the user can do anything including destroying the system.
Also the web browser runs unrestricted, so the security of the browser depends on the browser itself to properly sandbox the javascript programs.