Wtf, if it’s such a huge security bonus, why wait for user adoption, especially if token stealing is an issue?