Can't they just modify the browser itself with an injection into the executable

surely there is a way around that