Well, the key isn't hardcoded in the browser implementation. (It's unique per-install) And I think browsers generally do a better job using OS security mechani

Well, the key isn't hardcoded in the browser implementation. (It's unique per-install) And I think browsers generally do a better job using OS security mechanisms to restrict access to that key, too.