Injecting JavaScript into someone's pages for "security" sounds like one of the very worst ways to go about improving security. I'm surprised I haven't heard of that injection being hacked to do very bad things yet.