API is running securely. Extension frontend is local to the browser.