If you base it origin couldn't that have false positives too? Like say other, less privileged apps?