Solutions relying on JavaScript that runs in user-controlled browsers are vulnerable to attacks and manipulation.