It is good practice to isolate any email/chat links from regular browser cookies, and similarly it is good practice to isolate PWA cookies from browser cookies.

It is good practice to isolate any email/chat links from regular browser cookies, and similarly it is good practice to isolate PWA cookies from browser cookies. It's not expected that the browser to dig up auth tokens from the Instagram app whenever Instagram resources are accessed from the browser. When people click "Add add to home screen", they expect this "app" to have similar sandboxing compared to their other apps. > Time to add new auth methods specifically because Apple? You don't need to add new auth methods specifically because of Apple. You need to add an auth method because you decided to something fancy that users and email clients/browsers don't expect. If you use a username/password combo or an email/password combo, it works everywhere.