These changes are positive, but I must say I find it hard to trust anything Google does while the impossible-to-disable and undisclosed advertising ID backdoor to DoubleClick exists in Chrome (alongside the most weak cookie policies in the entire industry). Part of me thinks they're strengthening security while deliberately leaving holes for their advertising arms to exploit.