> I am reminded that what I really want is the ability to jail/chroot a browser.

Sounds a bit like local Docker for browsing?

Everyone would download the same Chrome container with the exact same clean config and software rendering so the canvas/WebGL fingerprinting yielded nothing?