The key thing to cut out is the ability of web site owners to make clients initiate connections or exfiltrate information without the user's say-so. That plus t

The key thing to cut out is the ability of web site owners to make clients initiate connections or exfiltrate information without the user's say-so. That plus the profit motive have made most of the Web spyware—and you're not gonna get rid of the profit motive, so it'd be more effective to make the Web practically impossible to use to distribute spyware. The Web needs far more capable built-in UI elements, and to remove most ability to script it. Including a great deal of CSS, which is under-rated as a source of bloat and slowness on the Web I think, in addition to having become a privacy threat. Never gonna happen, but it's nice to imagine.