The first time a file is shown as web content, it should ask for permission. I don't think this would introduce much friction, and it would reduce the attack surface area a lot. Of course the web contents shouldn't be able to hack you in the first place. But nobody is perfect.
The first time a file is shown as web content, it should ask for permission. I don't think this would introduce much friction, and it would reduce the attack surface area a lot. Of course the web contents shouldn't be able to hack you in the first place. But nobody is perfect.