Is `iframe[0]` safe? There could be more than one iframe on the page in future. Shouldn't we look it up by id?