@dalias @alwayscurious @swordgeek @theearthisapringle One problem with full isolation between sites is it effectively breaks SSO and "Login with $app" kind of workflows which are sometimes mandatory, and copying stuff like cookies/LocalStorage/… over means that token-stealing isn't mitigated.

Meanwhile here I've just made the new-tab button (and ctrl+t) open in a new session (which are all ephemeral).