We already trust our auth cookies and the actual content of the connections to our browsers. Having them be more in charge of the auth process makes a lot of se

We already trust our auth cookies and the actual content of the connections to our browsers. Having them be more in charge of the auth process makes a lot of sense. Especially given that modern browsers have a lot more security hardening (sandboxed multi-process architecture) and professional review than other applications.