Sensitive information such as keys should not be transmitted via cross-session messages, because plaintext transmission does not equate to secure isolation.