Security Considerations

Do not pass secrets or credentials via theme or supportedChains. The theme is appended to the UI URL as a query parameter.

The widget communicates with the embedded UI using postMessage under the hood; there is currently no public event API for external consumption.