Nowadays, thanks to WebCrypto, browser encryption is just as strong as any other encryption.
Preventing malicious patches in web apps is just as important as good encryption. The solution is code signing, just as for any other piece of code that runs on your computer. On the web this is possible thanks to another W3C standard called subresource integrity (https://www.w3.org/TR/SRI/).