You're totally right that this would be something that the users would be using... perhaps the only requirement as a website owner would be to properly configur

You're totally right that this would be something that the users would be using... perhaps the only requirement as a website owner would be to properly configure the Content Security Policy (CSP) HTTP headers [0]. [0] https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP