Hmm that is a fair point.

Maybe a more secure alternative to iframes can emerge. Something like Chrome's WebViews.

Even though as of right now native browsers can intercept your data as well, it's a matter of trusting the tool.