I prefer an actual client, especially because I press CTRL+w before my brain sets in, but there are plenty of examples. My latest encounter was Rancher, a k8s management thing. But a client running in a browser window does not imply any remotely exploitable vulnerabilities.