It actually just needs a user naive enough to not click "Vi…

It actually just needs a user naive enough to not click "View Source" and not inspect every Moneybutton.

A decrypt operation can be sneaked in and silently read all your mails.

You will never know it even happened.