Simply disallowing access to private network space is a non-starter, since it’s used so frequently. For example, a typical use case is that an office has a priv

Simply disallowing access to private network space is a non-starter, since it’s used so frequently. For example, a typical use case is that an office has a private IP space, e.g. 10.0.0.0/8, and various external services will link into it, e.g. Gmail, Okta. Disallowing access to localhost seems more plausible, especially if there’s an exception for extensions so that things like 1Password can continue to work.