I would say that it's also complicated by the fact that it's a design feature for the web browser and various web pages to have access to sensitive information.

I would say that it's also complicated by the fact that it's a design feature for the web browser and various web pages to have access to sensitive information. So the answer to "Is it possible for the web browser to do X?" is going to be "yes" for a wide range of X's.