diff --git a/ios/chrome/widget_kit_extension/shortcuts_widget.swift b/ios/chrome/widget_kit_extension/shortcuts_widget.swift
--- a/ios/chrome/widget_kit_extension/shortcuts_widget.swift
+++ b/ios/chrome/widget_kit_extension/shortcuts_widget.swift
@@ -229,10 +229,12 @@ func loadMostVisitedSitesEntry(
   guard let unarchiver = unarchiverForAccount
   else { return emptyEntry }

-  unarchiver.requiresSecureCoding = false
+  unarchiver.requiresSecureCoding = true

+  let allowed: [AnyClass] = [NSDictionary.self, NSURL.self, NTPTile.self]
   guard
-    let mostVisitedSites = unarchiver.decodeObject(forKey: NSKeyedArchiveRootObjectKey)
+    let mostVisitedSites = unarchiver.decodeObject(
+      of: allowed, forKey: NSKeyedArchiveRootObjectKey)
       as? [NSURL: NTPTile]
   else {
     return emptyEntry