I've read through Electron's context isolation, IPC, and security docs, along with this post