So how does the service authenticate the user?
User installs a browser extension (wallet) that is created by a third party that they have to trust unconditionally?
Is that what the promised land of zero trust is about? Trusting a 3rd party with all your finances?