Side-channels on such a model would be very hard to enforce: if any element of the page "moves around other elements", all other elements must be tainted as they'd leak information on the tainted DOM node. Presence or absence of a DOM node can leak information about a tainted context.

The second idea is vulnerable as well. As long as you can exfiltrate tainted data to untainted context, the protection will be quite weak.