Code you can't update is normally an expensive liability in the case that it's not perfect. Also, then the stub service worker is subject to the same problem it

Code you can't update is normally an expensive liability in the case that it's not perfect. Also, then the stub service worker is subject to the same problem it's attempting to solve. I'm still left in a situation where I need to trust you don't mess up. You even say it yourself: > (Of course, we can't prevent the update, but we can at least try to convince the user to close the web app before it steals their private keys.) At that point, the game is up.