option 2: Client-side Security Threats