@Log3overLog2@fabricedesre Notably, local communication is intent-mediated, ability to exfiltrate is largely limited to navigating out of a tile or similar openings (at least for now). It's possible to exfiltrate but that puts some limits and opportunities for gating.
I'm hesitant to go into further detail without prototyping more. The odds that tiles would replace ALL web content seem veeery low, so one tradeoff is to make them super strict and cover fewer cases vs the opposite.