mainstream web app engineering is not made for sovereign users. the hwole javascript runtime is reflected and anything loaded into the page can read anything from anywhere else. if you made your apps ...