> If a tool's threat model never considered having network input in the first place, that tool would seem deficient in most every real-world situation. The hyp

> If a tool's threat model never considered having network input in the first place, that tool would seem deficient in most every real-world situation. The hyperbole isn't needed. Risk can be avoided, mitigated, transferred, or accepted. This extension, which otherwise looks fantastic by the way, moves the risks between those categories for various local tools, the data in the DOM, and even for remote accounts of the other current websites. That is what is happening here. > I do not per se see a problem with "network input" but I think you're referring to input from untrusted sources, i.e. input that is not controlled or approved by the user of the tools. That is the implication of saying network input, since that input is uncontrolled and from a third party.