0 known vulnerabilities, Electron sandbox enabled, contextIsolation enforced, openExternal URL allowlisted. Full report in SECURITY.md if anyone wants to dig in.