The session-to-user binding bit stood out to me. It’s easy to assume the sandbox solves everything, but identity can still be the weak link.