[charles_f]

I guess it's reducing the attack surface for your users, as you can't have a malicious userscript that would log your cc number or something