This proxy loads provider-controlled JavaScript in a hidden browser. The provider can change traffic timing, batching, padding, and network use, and may consume CPU, memory, or battery. Telegram credentials and native APIs are not intentionally exposed, but provider code remains untrusted. Enable only providers you trust.