You're right, and Electrum actually has a history of severe security bugs. I think there was one a while back where any website you visit could use JS to connec

You're right, and Electrum actually has a history of severe security bugs. I think there was one a while back where any website you visit could use JS to connect to Electrum's RPC interface and do things on your behalf.