Thank you for this great explanation! I understand that the prolem is inherent in in web-ased security systems and not much can be done. However, let's suppose

Thank you for this great explanation! I understand that the prolem is inherent in in web-ased security systems and not much can be done. However, let's suppose that I packed the client functionality to an electron app (i.e executable with some signature) so the .js files doing the encryption/decryption would not be downloaded from the server each time but they would reside inside the electron app. Would that be better from a security standpoint against the attacks you mention or I'm missing something?