2. I asked __apf__, who is in charge of browser security UI in the Chrome team, and she told me they've done no research.