Hand Off Intent, Not Authority

Moving a user from one application host to another often looks harmless. A button opens a browser,...