There is also the fact that there can be legitimate uses for APIs which expose information by design One of the few good ideas Google proposed is Privacy Budge

There is also the fact that there can be legitimate uses for APIs which expose information by design One of the few good ideas Google proposed is Privacy Budget [1], which now appears to be abandoned. In short the browser estimates how much information each risky API call discloses, and blocks further calls if the sum exceeds some threshold [1] https://developers.google.com/privacy-sandbox/protections/privacy-budget# https://developers.google.com/privacy-sandbox/protections/pr...