“it works when everyone behaves well” is not the same as being protected.

It doesn’t even take a malicious actor: I am working on a local-first browser extension that is very aggressive about caching content in the database. There is no “please delete this data” for an extension. You of all people should not be making claims about privacy that you know you can not guarantee.