The in-browser, over-the-wire javascript crypto implementation still makes me nervous. I'd love to hear some compelling evidence to the contrary, but as I understand most of what has been stated before about in-browser crypto hasn't changed much [0].

[0] https://tonyarcieri.com/whats-wrong-with-webcrypto