If a browser extension or malicious local access has the ability to extract or manipulate cookies, it indicates a compromise at the device or browser level. This type of threat lies outside the scope of what the Mendix platform can directly prevent. As such, it's essential to ensure that local environments are secure, including keeping browsers, operating systems, and security tools up to date, and avoiding untrusted browser extensions.