Coinbase has come under scrutiny after a security issue involving plaintext mnemonic phrase collection on its web pages was highlighted. Although Coinbase has taken down the problematic pages, concerns persist as similar vulnerabilities have been identified. Security experts warn that online web pages have a lower security model compared to extensions or apps, making them susceptible to phishing attacks. The practice of collecting plaintext mnemonic phrases online is particularly risky as it can be easily mimicked by phishing sites. Critics argue that as a leading wallet provider, Coinbase should proactively eliminate such vulnerabilities to ensure user safety, rather than relying on external reports to address them.