Researcher reveals 'catastrophic' security flaw in the Arc browserBoosts feature in Arc enables website customization but has security measures restricting sharing.Firebase misconfiguration allowed unauthorized assignment of Boosts to different users.