    <section>
      <h2>
        Security and privacy considerations
      </h2>
      <section>
        <h3>
          Security
        </h3>
        <section>
          <h4>
            Spoofing risks
          </h4>
          <p>
            Displaying installed web apps in a frameless window leaves room for
            developers to spoof content in what was previously a trusted,
            UA-controlled region.
          </p>
          <p>
            Currently in Chromium browsers, `standalone` mode 