That explains why I was unable to find any secure way to store keys or sensitive data in their API[0] docs.
Which means user authentication apps will not come any time soon, like Authy (Authenticators), Bitwarden (Password Managers) or BankID (Swedish) (Identity Verifiers).