Which of the following is the PRIMARY concern when using an Internet browser to access a cloud-based service?

Insecure API implementations are a concern for developers and backend integrations, not the primary risk faced by an end user accessing a service through a standard web browser.

Improper storage of management keys is an administrative and developer-side concern related to credential management, not the primary threat vector introduced by browser-based cloud access.

Infrastructure misconfiguration is a cloud provider-side concern affecting backend security posture, and while serious, it is not the primary risk introduced specifically by using a browser to access the service.

When a user accesses a cloud service through an Internet browser, all communication traverses public networks using protocols such as TLS/HTTPS. Vulnerabilities in these protocols (e.g., weak cipher suites, outdated TLS versions, certificate validation flaws) can allow attackers to intercept, decrypt, or manipulate confidential data in transit. This is the primary concern specific to the browser-to-cloud communication channel, as the browser is the direct interface relying on these protocols for secure transmission.