I just came across this extension: https://www.reddit.com/r/emacs/comments/1hvtlsa/the_new_and_only_orgprotocol_chrome_extension_you/
https://addons.mozilla.org/en-US/firefox/addon/emacs-paw/ Do you think this meets some of your needs and avoids the security issues you've raised?