1) Exactly. Also, the more crypto you move into the browser, the easier it becomes to inspect downloaded code and isolate misbehaving developers.<p>2) Exactly. I don&#x27;t follow the standard process these days, but it&#x27;s sad that we&#x27;re not really making any progress in such a critical area. We now have pretty progress bars, but we&#x27;re still as vulnerable as 20 years ago.