Honestly, I know that it's far too late to change now, but I think the ability of a web-page to silently request resources from other domains has proven to be a

Honestly, I know that it's far too late to change now, but I think the ability of a web-page to silently request resources from other domains has proven to be a complete misfeature overall. What's it given us? Tracking cookies, spy-pixels, cross-site-scripting-attacks, hard-link-bandwidth-stealing, SSL mixed-content warnings, etc. Yes, I know it's also given us CDNs and Single Sign-On, but there are ways to implement SSO as a more active action without that, and I'm not convinced that CDNs are worth the cost we paid.