I'd prefer to see 'trusted' sites being to use javascript only. Heck, even use javascript only after log in. Alternatively, run them at an isolated context wit

I'd prefer to see 'trusted' sites being to use javascript only. Heck, even use javascript only after log in. Alternatively, run them at an isolated context with no websockets, limited access to timing (second or two precision - a lot sampling needed), limited CPU and memory utilization, no sound, no GPU acceleration [likely another large side channel surface], etc. Ahh yeah and delete all their cookies while we are at. Javascript has turned to a total bloat