Isn’t it just absolutely bananas that you can just inject arbitrary JavaScript into webviews. I wish apple added a privacy feature to disable this because it’s so ripe for abuse