This wallet works as a browser extension and that’s why can be vulnerable when the browser is under attack.