Web3 security opportunities and the lessons we must learn from Web2