MetaMask utilizes a 'defense in depth' security model to ensure malicious code committed to its repository does not reach the end user