I wonder how this works under the hood and if it is significantly compromises security - no technical details in the article