I figure that some kind of MAC sandboxing for cookies and similar credentials probably seems like a good idea. I think that macOS has something like this with per-application sandboxes, but I don't know how effective this is.