A big hurdle is i dont think browser extension signing would work in iframes