Browser Trading Security Risk

The risk is that a bad actor could setup a community node and steal coin keys. The trade bot has to have the keys in order to issue the transactions on your account's behalf, so that means the community node you are accessing would have your keys. This is why the core limits you to using localhost to issue trades.

The best advice is to set up your own node and have complete control over your node! There’s no reason to access Qortal on any other device than what you directly control.