[unethical_ban]

I wonder if it can be implemented on a per-site basis, like a security policy.

Exception: gitea uses Github oauth

Exception: unbury.me uses Google login

etc

Default: Full FPI

[bscphil]

This is extremely easy to do in uMatrix. If you don't want to use the other features, just set a default policy of allow all, then block third party cookies. You can then selectively allow access to cookies on a site by site basis.

[unethical_ban]

Good point. So the technology is there, and an "expert" UI.

It would be neat to see Mozilla create an intuitive UI for this to enable first party isolation by default, like a permissions model for other things. A modal popup "Unbury.me wants to grant access to google.com", for example.