Comment by jkrejcha

If the attacker can already execute code as you unrestricted, then you've kinda already lost.

Local storage isn't any better in this regard