Great idea, but how do you guarantee “no-account needed” security? Even if the code runs on the client, browser extensions (such as malicious plugins) or a compromise of the CDN from which your script is loaded can easily intercept this data. Trusting the “browser” when it comes to the security of client data is an oxymoron. How do you plan to convince paranoid security experts that your website hasn’t been compromised?