You can configure and even turn off external url handlers in Chromium. But even if you didn’t, the attack becomes even more difficult and niche here because no

You can configure and even turn off external url handlers in Chromium. But even if you didn’t, the attack becomes even more difficult and niche here because now you’re looking for a machine running a specific version of $email_client on a specific version of Windows. This is something that you can’t even use browser fingerprinting to detect.