Opera has added a default-on browser defense aimed at clipboard hijacking and command injection, a reminder that the paste action can carry more risk than it appears.