That's more to do with the E2EE implementation than how it was deployed... Cryptocat did a lot of things wrong other than using crypto in the browser.