> it appears that no-one takes this threat seriously, not even in secure/financial apps. I think that's pretty standard for our industry, even outside the ofte

> it appears that no-one takes this threat seriously, not even in secure/financial apps. I think that's pretty standard for our industry, even outside the often comically lazy world of JS.