People need to be forced to think twice before taking in such sensitive information as a passport or even just addresses. This sort of thing cannot be allowed to be brushed off as just a bunch of kids making an app.

That's my issue with all of these solo-maintained forks. It's a security nightmare, and browsers are a prime target for supply chain attacks or other forms of subterfuge. The security model just simply isn't acceptable.