I like what Avatar Museum has done in the latest release. There is a helper application that scans the local log file for log entries that have a special key and a URL, and then the helper application opens the browser.
When it comes to the vket markets its very clear, with a confirmation that a URL will open. If a browser tab opens on my PC when I’m in VR, there is too high of a chance I wont notice it for awhile, so hopefully care is enforced.