File System Access API - security bugs