Security gurus of FC: anything we should be wary of when it comes to frames? I understand certain data is signed + sent when clicking a button — I trust @varun and team have thought things through, but the paranoid part of me wonders how frames could be used maliciously