I feel like an actual security-driven design is a lot better than just relegating everything to the browser.