Security risks undermining core browser isolation principles