WebXDC threat model?

@Simon, thanks for your clarification!