This seems brilliant! But the solution for SSO concerns me, given most SSO providers (Google, Facebook) are among the main ones partitioning aims to stop from tracking you. By giving Google SSO unpartitioned access, doesn’t that also let google track you anywhere?
My understanding is that if you use Google SSO from xyz.com Google can track you only there and not abc.com. So the partition is only lifted for a single domain.
