Four Critical Steps Toward Securing Web3