Chrome turned on site isolation by default in chrome 67: https://security.googleblog.com/2018/07/mitigating-spectre-with-site-isolation.html https://security.go

Chrome turned on site isolation by default in chrome 67: https://security.googleblog.com/2018/07/mitigating-spectre-with-site-isolation.html https://security.googleblog.com/2018/07/mitigating-spectre-w... My point is that the OS has no responsibility to isolate threads from one another, regardless of how many applications may try to do it themselves anyway.