Threat Model
Disable remote module; enable contextIsolation and sandbox.
IPC
Only allow whitelisted channels; validate payloads strictly.
Updates
Sign assets; verify before swapping; keep rollbacks ready.
IPC isolation, CSP, safe preload bridges, and auto-update with signature verification.

Disable remote module; enable contextIsolation and sandbox.
Only allow whitelisted channels; validate payloads strictly.
Sign assets; verify before swapping; keep rollbacks ready.