https://www.humansecurity.com/learn/blog/client-side-security-blindspot