Eric Claw, a member of the Chrome security team, explains one aspect of why browser security is so hard: if the website can overwrite parts of the screen, how can you trust what you see?