This doesn't look good. Still time to fix this, but I'm surprised there was no urgency even when they knew about it
After getting the above response, I asked the devs when the new version of the web wallet will be released. No response so far. I'll post here if I get any.
This needs to be fixed on an urgent basis. After what happened with Parity hack, I don't think I can sleep easy until this is fixed.
Shift also needs a desktop lite client. Web wallets cannot be trusted.