the part that’s safe is in the browser. it’s a basic fact of how http requests work that you can just request data and then not read it.

also, “task managering the popups”? unless i’ve missed some very weird development that has literally never worked, because popup windows are part of the parent process.