Relying on the model for security is not security at all.

No amount of hardening or fine-tuning will make them immune to takeover via untrusted context