There are many situations where this comment rings true - I've been vocally opposed to Google's so-called security-inspired restrictions to its extensions in Ma

There are many situations where this comment rings true - I've been vocally opposed to Google's so-called security-inspired restrictions to its extensions in Manifest V3, for instance. But the cross-browser initiative that is HSTS, allowing site operators to opt-in to protection against HTTPS downgrade attacks, is not one of those situations. Empowering businesses and creators to make their sites more secure for their users, in situations where there aren't side effects, is a good thing!