It has been brought up that we could suggest best security practices. For example: - having a dedicated browser profile which has no extensions (extensions could capture DOM content)