It seems that an undifferentiated threat model is being used. Within the scope of physical access to an unlocked device all attackers are considered to be ultim

It seems that an undifferentiated threat model is being used. Within the scope of physical access to an unlocked device all attackers are considered to be ultimately sophisticated and absolutely untrustworthy. This model is clearly lacking, and is not appropriate for software as widely deployed as Chrome.