You were well ahead :) One thing that is unfortunate is that the expectation that browsers are trustworthy agents for the user was a foundational assumption in the development of Web technology, but it was considered so obvious that it was decades before anyone wrote it down.
♥ 2