[web2py] Security question: cookie manipulation & stealing cookies

[devGS]

I saw many explanations about web2py's built-in security, but does it
have some implemented security against cookie manipulation and
stealing cookies attacks? -For cases when the attacker is the user,
and when the attacker is not the user.  If not, can someone provide
some recommendations for a beginner on how to defend myself from those
vulnerabilities? Thanks.