Ideas for improving security: - Make it run without "rooting" electron/without exposing electron modules - Only allow an additional whitelist of domains in the Content Security Policy Header