"Security UI is hard" - not. It's all this mucking around trying to take over our devices and make things full screen all the effing time and trying not to have any 'chrome' that's causing the problem. Leave users to decide whether they want full screen or not, and never force them to accept popups or full screen views. Oh, and let them have at least some 'chrome' around a window to keep things a bit more sane.