Another thing is non exportable WebCrypto keys that can limit the damage even if the page is compromised.
Another thing is non exportable WebCrypto keys that can limit the damage even if the page is compromised.