These above below are wrong about "This is not pointless or useless" because platforms like steam suffer with cookie session stealing, and this is the only effective solution for now: https://github.com/w3c/webappsec-dbsc/blob/main/README.md